2024-10-17_4064c8f82a2b561cfd8c7ab6d2dd4cd2_cryptolocker | Triage

Sharing

General

Target

2024-10-17_4064c8f82a2b561cfd8c7ab6d2dd4cd2_cryptolocker
Size

66KB
MD5

4064c8f82a2b561cfd8c7ab6d2dd4cd2
SHA1

4f30f77381dfe3be1a567b204fa32fe043ddc117
SHA256

74a2aa4b591f1b7bb4ec4c94050725f240c7e312352491ede86eeaeb904c57cc
SHA512

acf621d7c87f7aaeb89613f821845d8ceed4f5d288600d75f3ff7217c455f3463a50b01444ff6b38d283d8e4db70b0994fe0259951c9661c20f1e4acaf9037cf
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKbW:DW60sllyWOtEvwDpjwF85L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-17_4064c8f82a2b561cfd8c7ab6d2dd4cd2_cryptolocker

Files

2024-10-17_4064c8f82a2b561cfd8c7ab6d2dd4cd2_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ