2024-10-09_6b8564119f5fe94b377c0fd8a5cc3bfe_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_6b8564119f5fe94b377c0fd8a5cc3bfe_cryptolocker
Size

73KB
MD5

6b8564119f5fe94b377c0fd8a5cc3bfe
SHA1

00d468ae3553b195d6bb8e6da8bc2c19fc2e7c0c
SHA256

9ba0594e41f7d7ada9d209921944435baca283170717cae8542124b9a49f3508
SHA512

4d574d89466b25b72190fdeeb0ad5bbee7cc0381e9886c4c1d8c5c77998aeb47115baa20fdc3564b75f7cf400b68c50f1561e4efb459c9b8a09f36d5f14b878b
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/Ri:vj+jsMQMOtEvwDpj5HZYTjipvF24pA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_6b8564119f5fe94b377c0fd8a5cc3bfe_cryptolocker

Files

2024-10-09_6b8564119f5fe94b377c0fd8a5cc3bfe_cryptolocker
.exe windows:5 windows x86 arch:x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ