2024-10-08_0b1dd1f84be2152b3cd4636671f7f242_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-08_0b1dd1f84be2152b3cd4636671f7f242_cryptolocker
Size

45KB
MD5

0b1dd1f84be2152b3cd4636671f7f242
SHA1

9ea19c4fc032d5cec779020e9a2171d55bcafe45
SHA256

7db87518740f414c47041810192f5d878b4723d45f1dad2fe8bfd11b43aca009
SHA512

b905b1ff9d6745734667b07c50d028ea00c8ff928b0feeb50b906b746e272139c323b7c04361fbf2d51137b4230e1bfca6b7894910b157b365a6304b28eee024
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+MV0Koj:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-08_0b1dd1f84be2152b3cd4636671f7f242_cryptolocker

Files

2024-10-08_0b1dd1f84be2152b3cd4636671f7f242_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ