2024-10-13_1983da78d760bab496505beeb605aa02_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_1983da78d760bab496505beeb605aa02_cryptolocker
Size

34KB
MD5

1983da78d760bab496505beeb605aa02
SHA1

96148673498d910fc8604f11d0046cd25b594866
SHA256

bf3508c6e92fe5d4d1e6ed82db038e6e4d518130e4c87b6de35021eb6838faa3
SHA512

ad8b311aaa82e7bb160036c3e9318fc3a70515a6efad97c99eda530c512418f72764f25d1eb7ff68ab737c6d798f057c23cbc68c8e914fec92332d97a3a86c8c
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzogFzpjufAq18vouKv:bAvJCYOOvbRPDEgXVFzpCYVvMv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_1983da78d760bab496505beeb605aa02_cryptolocker

Files

2024-10-13_1983da78d760bab496505beeb605aa02_cryptolocker
.exe windows:5 windows x86 arch:x86

5a4767bc6f06914cff6e249c178e3b95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
DrawTextA
EndPaint
BeginPaint
PostQuitMessage
ShowWindow
UpdateWindow
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ