2024-10-05_d496e479a1bd719e09599e0c04de13d3_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-05_d496e479a1bd719e09599e0c04de13d3_cryptolocker
Size

69KB
MD5

d496e479a1bd719e09599e0c04de13d3
SHA1

cb64a3db17e0c14d13ae8465286cfabb748e8252
SHA256

fc92ce37fe1d39c9d6c01241f603f8ab81f5d77d618d51613c640403619de320
SHA512

d9bdd57f5115b1f2d16988ef54a53c3c5ec5945a9de108587277d1b52fc7064fbf1500f43e12ea2ae35f11efbeb306365261ed29661173a6a33926dbc3bfc2eb
SSDEEP

1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF299N2UYo:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-05_d496e479a1bd719e09599e0c04de13d3_cryptolocker

Files

2024-10-05_d496e479a1bd719e09599e0c04de13d3_cryptolocker
.exe windows:5 windows x86 arch:x86

db206e36db5c9492ce02c61a679129e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
DestroyWindow
LoadCursorA
GetClientRect
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
DeleteFileA
CloseHandle
CreateFileA

gdi32

DeleteObject
CreateFontIndirectA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ