2024-10-12_6a45c8839b0a04f29f37fd8a313c6426_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_6a45c8839b0a04f29f37fd8a313c6426_cryptolocker
Size

34KB
MD5

6a45c8839b0a04f29f37fd8a313c6426
SHA1

1d47187674a26bd74fa85fd01063119746390c79
SHA256

e71823fe76334a30963ef2a33d26993b53fbd6febadd1ab18e28a14c61849c8b
SHA512

6f8ef26db8e24539c01f7b89e024f6e5e66e80c5d3193ae6c2092fe496b1a1f5f820dc9deeab11d8f71d1487cd1c99e3cea66c014a7805ce8abe4cf7ec241fb2
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoi0WlLYZAM9BWpS/:b7o/2n1TCraU6GD1a4X0WlK5gS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_6a45c8839b0a04f29f37fd8a313c6426_cryptolocker

Files

2024-10-12_6a45c8839b0a04f29f37fd8a313c6426_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ