2024-10-13_f2354d779a83d45c0b347707693e84f1_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_f2354d779a83d45c0b347707693e84f1_cryptolocker
Size

42KB
MD5

f2354d779a83d45c0b347707693e84f1
SHA1

86452787dac881ad0d34332131085f7115f9ee6e
SHA256

c02bd16088e2ea8e7e39ed5c654cbf208ca1ec91bca08ccb1f4254182775c464
SHA512

a6a64efc5df576d53502e831b9856d2137894671a012ff2aa25c0a4af89c96224e0641570038738904f9c955af8698a275f960404b476808ad0bc9799a099385
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTh:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_f2354d779a83d45c0b347707693e84f1_cryptolocker

Files

2024-10-13_f2354d779a83d45c0b347707693e84f1_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ