2024-11-21_1cd4b4188682e4e639097879efb69921_cryptolocker | Triage

Sharing

General

Target

2024-11-21_1cd4b4188682e4e639097879efb69921_cryptolocker
Size

73KB
MD5

1cd4b4188682e4e639097879efb69921
SHA1

0162a4ae9d13b7668e8062379170f96a86dc601e
SHA256

9ce474975a9b57edd0e3838b1604634d8f54a6149261eb489c78d70c4ca17462
SHA512

cf85a3c9362e5aa98307220c6aec64427db75feb1a3d514edfccf9f02b7c8c88e97b26cbdefde0c31eb6bf4108b9a8173bf8326c7a42921039ffc6406eb16d2f
SSDEEP

1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO3:DW60sllyWOtEvwDpjwF85g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-11-21_1cd4b4188682e4e639097879efb69921_cryptolocker

Files

2024-11-21_1cd4b4188682e4e639097879efb69921_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uzwvn
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ