2024-10-14_2a28e00b4006a6fbab7dea75383768d6_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_2a28e00b4006a6fbab7dea75383768d6_cryptolocker
Size

44KB
MD5

2a28e00b4006a6fbab7dea75383768d6
SHA1

162cee24108f787dad8eb70734a9ecce7c329c37
SHA256

94f4bc900a831b40f31c2651db0218d3881c761154cf5d7cd601f6129edae933
SHA512

d282ef88f0d4017227843c88b03952179ae235583fdfb0d799cb2937c224f4c32172afa784747f0a37f7d9bd34317b206c44cbd7b0583d416fcff61d4e2a296c
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTTHFL:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-14_2a28e00b4006a6fbab7dea75383768d6_cryptolocker

Files

2024-10-14_2a28e00b4006a6fbab7dea75383768d6_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ