2024-10-09_b20a234e84b385c84d0878cc9c739e13_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_b20a234e84b385c84d0878cc9c739e13_cryptolocker
Size

49KB
MD5

b20a234e84b385c84d0878cc9c739e13
SHA1

a84cdb48e19e4912ce480486d59c98a2b82618a9
SHA256

75d0de55e990fb1f9dc7fdde6fbd68591a33c578d5be123d45f451d8b5e6057a
SHA512

4203f0af4f4a9eef0b685959a07f83efb662c1293bb99d9011d2d1cae7b15e183cd0dc16541fca2c40d7d54cae8ab359c32aadf21216352966e38f2aa5f7d6b3
SSDEEP

768:26LsoVEeegiZPvEhHSP+gDdQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITbB:26Q0ElP6G+gBQMOtEvwDpjgWMl7TF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_b20a234e84b385c84d0878cc9c739e13_cryptolocker

Files

2024-10-09_b20a234e84b385c84d0878cc9c739e13_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE