2024-10-13_724fd6ec258ccd41f853b1e72c7536a6_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_724fd6ec258ccd41f853b1e72c7536a6_cryptolocker
Size

37KB
MD5

724fd6ec258ccd41f853b1e72c7536a6
SHA1

0d42fe271fba7ec4b1a839fd983492c0476c1f4e
SHA256

af415f0ee832ebe9d5fa4f8fa2871e8ec58cc378078d3a340c03d5235206193a
SHA512

92c2015f6638fac7ceb8227b9f832965922a4428d5f0a7430c54d2f7d848d031fa17656dbc6fea69e407bfa8b55f3e87239befc4d3e5dfd52c5f7d7ced5b80e4
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMZ:bc/y2lkF0+Be

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_724fd6ec258ccd41f853b1e72c7536a6_cryptolocker

Files

2024-10-13_724fd6ec258ccd41f853b1e72c7536a6_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ