2024-10-13_d9d3a1fbe820a24eff191c3ab46cdc72_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_d9d3a1fbe820a24eff191c3ab46cdc72_cryptolocker
Size

33KB
MD5

d9d3a1fbe820a24eff191c3ab46cdc72
SHA1

6eb9c8eccffd391663f4d38f7084b86c03cc34c6
SHA256

aa9bcec2a71b9fb2d9ae2c638924a920269fd37567b7ae173868e3f7d0f47937
SHA512

c80e8e8805b2365ee07de7920ae333e6728429733956eaffe3f40f4966dbd8af591fe86e89982df8ed3f018ccd68a499e341b5d55e0b587c3ccd1c384d64016e
SSDEEP

384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7Ld0:bAvJCYOOvbRPDEgXRcJPd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_d9d3a1fbe820a24eff191c3ab46cdc72_cryptolocker

Files

2024-10-13_d9d3a1fbe820a24eff191c3ab46cdc72_cryptolocker
.exe windows:5 windows x86 arch:x86

5a4767bc6f06914cff6e249c178e3b95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
DrawTextA
EndPaint
BeginPaint
PostQuitMessage
ShowWindow
UpdateWindow
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ