2024-10-13_f888ff8446d42796d9cd494d7090da30_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_f888ff8446d42796d9cd494d7090da30_cryptolocker
Size

34KB
MD5

f888ff8446d42796d9cd494d7090da30
SHA1

152399a1c8eb6fc1ca9a58f177d6ba319504935e
SHA256

8c29d319a29da40793eb91462f73bd75362bd4f52afbd8697a4f1b5bb097ebfd
SHA512

e6894cf7241a9d3626caf308dd0b1e27aad6316e6f3c97f83895479bc2aa2b2dc41f57d7a556e7424bc75fc211d5c767bb7e9f3fc7921bca7f05431bfb033488
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPd:YGzl5wjRQBBOsP1QMOtEvwDpjgarg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_f888ff8446d42796d9cd494d7090da30_cryptolocker

Files

2024-10-13_f888ff8446d42796d9cd494d7090da30_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ