2024-01-18_89fe20029bfb18213ac69239ba4c2335_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-18_89fe20029bfb18213ac69239ba4c2335_cryptolocker
Size

40KB
MD5

89fe20029bfb18213ac69239ba4c2335
SHA1

3902436a21de8cfc8bacf417bd3bd373ca84856c
SHA256

36f7a9585e6aeac34c9d853a66ff3d73694e7c38dbf5196db549670e8edc2fce
SHA512

a2cb2666970e76cfeb41f00ac6289b2e7b556453a0e8e296b3ab2c06ccd1b918012d87d21e2e3640ca8b440589232f731e8bc7f6a27dfa81581125c52829c000
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMvcW1:bc/y2lkF0+B2P

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_89fe20029bfb18213ac69239ba4c2335_cryptolocker

Files

2024-01-18_89fe20029bfb18213ac69239ba4c2335_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ