2024-10-04_e864aa0c96c7204fc155839b41359ac4_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-04_e864aa0c96c7204fc155839b41359ac4_cryptolocker
Size

44KB
MD5

e864aa0c96c7204fc155839b41359ac4
SHA1

cdc71ab9207b38c5c41f0796de776059c2641da7
SHA256

83b4347c8acd8016053ef3b86f1d8fadc2a86f8a938a8fcd9e03517866116f58
SHA512

3f3aa8e0eef8251bef8a8c5e54f2fabb2bf376ff53f7e4a8ef5e16a7f5519380afd6531ac6fdd61c288f00332c076307273a861c00e2a1078386370690095091
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TR:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-04_e864aa0c96c7204fc155839b41359ac4_cryptolocker

Files

2024-10-04_e864aa0c96c7204fc155839b41359ac4_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ