2024-10-13_99e15873161825cfdf218164dbf67f78_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_99e15873161825cfdf218164dbf67f78_cryptolocker
Size

41KB
MD5

99e15873161825cfdf218164dbf67f78
SHA1

8de2bf8e30c38443ad2e393123c2338c1976f25b
SHA256

8f9c49de9355a0aac3a99ed798801c2f5304a9bb95a8bfbdb91afc081bfef3f2
SHA512

e7df689d94ac256308c6899e918c33e3e88e1b9e612ce0a2200daa7c6ee86580f06d202a5982d6f8ef84a8fdc88d0b0d55fe7309cabe1cec61902048ae98a600
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2XM9:V6QFElP6n+gMQMOtEvwDpjyaHaXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_99e15873161825cfdf218164dbf67f78_cryptolocker

Files

2024-10-13_99e15873161825cfdf218164dbf67f78_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ