2024-10-10_ac5cf4e5f36db392f7dfd62b42f76209_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-10_ac5cf4e5f36db392f7dfd62b42f76209_cryptolocker
Size

50KB
MD5

ac5cf4e5f36db392f7dfd62b42f76209
SHA1

961f115e2eaa01fc93d7445cb02348473a4eec53
SHA256

b58606a434edb48018f57a5c4d5444ba3630991f86bba8b8f2690a7a469674d7
SHA512

a1762ad13b6f690abc0394dfc91ba24c6ff432bff2a87548e22ffe112dab59a8c60e65ffa60074438bf94640c11c0847cd1e4f5c0f670c8ac5c97127ea580899
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nt:vj+jsMQMOtEvwDpj5HczerLO04Bq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-10_ac5cf4e5f36db392f7dfd62b42f76209_cryptolocker

Files

2024-10-10_ac5cf4e5f36db392f7dfd62b42f76209_cryptolocker
.exe windows:5 windows x86 arch:x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ