2024-10-12_bf78acafc13ac816c05c022d052a89b7_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_bf78acafc13ac816c05c022d052a89b7_cryptolocker
Size

89KB
MD5

bf78acafc13ac816c05c022d052a89b7
SHA1

1b6bde95d38c440c129d4df66bfe3d97da74401d
SHA256

f545883b402c9643206786b7ccba6a5621e0c6a64a639284c67d9f437d415e59
SHA512

f0af7590e264d3e0ef03cf8f177c48f1f988cbe76f0ade777f4a1a130fbd43866a2c86317d5a0a0fb699290df87529fa53677b24dfae358aa3b9eb1167b5dd8d
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWNVtZc:V6a+pOtEvwDpjtN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_bf78acafc13ac816c05c022d052a89b7_cryptolocker

Files

2024-10-12_bf78acafc13ac816c05c022d052a89b7_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ