2024-10-04_4f659a417b4e0db05f173edfcd7d22ba_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-04_4f659a417b4e0db05f173edfcd7d22ba_cryptolocker
Size

49KB
MD5

4f659a417b4e0db05f173edfcd7d22ba
SHA1

f93e8d32d688797d009babff9550df2aaa12f86e
SHA256

9d36887f7c5a13a7781166fa892c9f290b59c7cd2f0beb249471df735c5c6076
SHA512

7b84470b30c3e854fcdea0386c708b9d17f96901bbcd8bf8c66d892b52b30db29528ec0558133846504c70bb2fbf70eec90cfc210ec6ed147dabe2cba97ac9ac
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITw:26Q0ElP6G+gBQMOtEvwDpjgWMl7Tw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-04_4f659a417b4e0db05f173edfcd7d22ba_cryptolocker

Files

2024-10-04_4f659a417b4e0db05f173edfcd7d22ba_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE