2024-10-09_f61497827693e68e4fa77add4cac69a5_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_f61497827693e68e4fa77add4cac69a5_cryptolocker
Size

96KB
MD5

f61497827693e68e4fa77add4cac69a5
SHA1

66464cfdc35a4516d9346880aef61e1bf2bf6f2d
SHA256

cb87afc95e1198db58b6a3c03d40c3c48c215c5af1d63fe6373cc6d8bf0f084f
SHA512

768f3ede577f2039b6f892c9118f1600c64c90170cfccf9c07452216c57f6d4578a55f6b48d3ae1498f0ae871b473583341295001fef664d7410c9c4ac3657e4
SSDEEP

1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNgpwO:26a+2OtEvwDpjtz6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_f61497827693e68e4fa77add4cac69a5_cryptolocker

Files

2024-10-09_f61497827693e68e4fa77add4cac69a5_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ