2024-10-18_dcdcbf8d90b770a48c780b2ef4d5718e_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_dcdcbf8d90b770a48c780b2ef4d5718e_cryptolocker
Size

39KB
MD5

dcdcbf8d90b770a48c780b2ef4d5718e
SHA1

a5505dfad32703e6463e1d9070f30388a02a5fd2
SHA256

627362f90f5911f3ec3bcd17d2b0857585b7558429e3b2fd1f8fd1e6be2443a4
SHA512

5ec539539b996e93c816062d5915085acbba43daf616f44bf7096a9a13fbcfab3f801e275eee976942a31476803f999090d90b3cc1380f5c86458d260029e5db
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMpK:bc/y2lkF0+BL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-18_dcdcbf8d90b770a48c780b2ef4d5718e_cryptolocker

Files

2024-10-18_dcdcbf8d90b770a48c780b2ef4d5718e_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ