2024-10-06_a900e470e7ba7a66020cb0baccc27bf1_cryptolocker | Triage

Sharing

General

Target

2024-10-06_a900e470e7ba7a66020cb0baccc27bf1_cryptolocker
Size

47KB
MD5

a900e470e7ba7a66020cb0baccc27bf1
SHA1

5566be0c10bab4f8fc86bebe503a8a1a1acbcb6c
SHA256

ea918821b74717705357415e361bda885c5f917128f81503a14cc4fad60ff157
SHA512

6feb9e28a0ff3a1b14d8de9cec05ef6ad52b0239d3bf31801c8ca855e8829880a58d86f7110aefc5d29ac3fb0ce0dcdd00f878b8d85204d79413e256a25fa2bf
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITD:26Q0ElP6G+gBQMOtEvwDpjgWMl7TD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-06_a900e470e7ba7a66020cb0baccc27bf1_cryptolocker

Files

2024-10-06_a900e470e7ba7a66020cb0baccc27bf1_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE