2024-10-17_608cd0d5363f47821293748f91ea223f_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-17_608cd0d5363f47821293748f91ea223f_cryptolocker
Size

84KB
MD5

608cd0d5363f47821293748f91ea223f
SHA1

3280357d7b731a14dddc99aee5835236cb7c1f0f
SHA256

6d5fa178c5ec52c6b527e63085bd449c18e0afc8e8af7ae2a1b6a7b94e5f9f36
SHA512

cd787298a0faf49614b20b0afc8b7dd0be68ed97dea1ed7067c523a8074165f0e14506157ba99dcc02e38eb9835e834b8db45efc2144c2cfec573dcc33d4a9b8
SSDEEP

1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1zz6:vCjsIOtEvwDpj5H8zP8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-17_608cd0d5363f47821293748f91ea223f_cryptolocker

Files

2024-10-17_608cd0d5363f47821293748f91ea223f_cryptolocker
.exe windows:5 windows x86 arch:x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ