2024-10-31_f700b2f45287f08ddb3555af78acdd1f_cryptolocker | Triage

Sharing

General

Target

2024-10-31_f700b2f45287f08ddb3555af78acdd1f_cryptolocker
Size

63KB
MD5

f700b2f45287f08ddb3555af78acdd1f
SHA1

1d9431ca93f3f1ebc553b53544e46cbc4b31a6b8
SHA256

393d41173b31bc370213773542a7f155f61a732486dfd9ebf28334f860160434
SHA512

c83339dc704741839c63b6fbf1c91a2ffb58b69218f1a0b6b94eb20b9e20ecc8bc3f8595c330929e4ca85802d649bb6129d0f3f69f338a023ba2dbcc44b97de5
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZn1V:btng54SMLr+/AO/kIhfoKMHda/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-31_f700b2f45287f08ddb3555af78acdd1f_cryptolocker

Files

2024-10-31_f700b2f45287f08ddb3555af78acdd1f_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ