2024-10-06_3bea6c3a256d0fc82f7d5712d1abcda3_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-06_3bea6c3a256d0fc82f7d5712d1abcda3_cryptolocker
Size

32KB
MD5

3bea6c3a256d0fc82f7d5712d1abcda3
SHA1

ca936cd679957e0e1191079af5d02381e11e68a3
SHA256

64eb9a32a3b12f3a462b55321bd6b730ebbb8e0ca3a5f04ee3e6151eea3642e3
SHA512

159b3378a2d6c9e840048686c001c534768c92eb4b94461c1c029f7aa02d3661ab835f1a57b3512d66aba3b260d5b0da4540a2d3500ac78387f72d2954cf6bd3
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3g0:X6QFElP6n+gJQMOtEvwDpjB2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-06_3bea6c3a256d0fc82f7d5712d1abcda3_cryptolocker

Files

2024-10-06_3bea6c3a256d0fc82f7d5712d1abcda3_cryptolocker
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ