2024-10-13_d771d27319e4242b61518d58ee63f630_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-13_d771d27319e4242b61518d58ee63f630_cryptolocker
Size

40KB
MD5

d771d27319e4242b61518d58ee63f630
SHA1

82f5abdfb1ce2c63d0f034b2b42d0a9e981bd30e
SHA256

a0d68f81d829953628e933d9e53c8d00b1a0a332606b1c692f6b5da3baf338b7
SHA512

e354ae0aff6f01fd295acea5f39ef4ebb2fef920b0e47d36ff5bfbba562fcc4dc615581d93c3594b9dba5c9fa6a3d97459c9107ac484f0c01e864fdbcb9abec2
SSDEEP

768:btB9g/WItCSsAGjX7r3BPOMHocM4vUUOmJ+mg:btB9g/xtCSKfxLIcMzUwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-13_d771d27319e4242b61518d58ee63f630_cryptolocker

Files

2024-10-13_d771d27319e4242b61518d58ee63f630_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ