2024-10-18_6f84883dd98cd403c69367779a67377c_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_6f84883dd98cd403c69367779a67377c_cryptolocker
Size

66KB
MD5

6f84883dd98cd403c69367779a67377c
SHA1

703922907a9dc9f632265eed2764737062c4ae85
SHA256

e2ebc624a999b7d1d13ad557be652552a4e4719796fd272bc43ffcfaedffe1f9
SHA512

838a610d5e3ef3a88eb27e6764025c436c69d063d29105376cebe6146d678325b0683d246500fc0b5cd8e656f6da7733fe52353516728cc431bbca592fa7983c
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNK7:DW60sllyWOtEvwDpjwF85S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-18_6f84883dd98cd403c69367779a67377c_cryptolocker

Files

2024-10-18_6f84883dd98cd403c69367779a67377c_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ