2024-10-31_3246e4905c5fb1f474f456bf00e9caaa_cryptolocker | Triage

Sharing

General

Target

2024-10-31_3246e4905c5fb1f474f456bf00e9caaa_cryptolocker
Size

43KB
MD5

3246e4905c5fb1f474f456bf00e9caaa
SHA1

606b592971aa078ce479c5592f56ed057e4e27dd
SHA256

dd2484ac7da09f08200821a334840e65859c0a76b6d685a7da950efcd3598552
SHA512

a4e6c1057b88fcb9077d992b4fe610bdf38281d02d816300bd4b2ac3badb57f328d408a135bc1eee753dcb0837baed4f26fc87fbb79f9320fc6a3ecdb8756f31
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TY3:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-10-31_3246e4905c5fb1f474f456bf00e9caaa_cryptolocker

Files

2024-10-31_3246e4905c5fb1f474f456bf00e9caaa_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yya
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ