2024-01-22_945e3cf5c87efd9f24724bc9100e4ee7_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-22_945e3cf5c87efd9f24724bc9100e4ee7_cryptolocker
Size

30KB
MD5

945e3cf5c87efd9f24724bc9100e4ee7
SHA1

88fe79108fb1acce8bd70246cd17e38a33e315e5
SHA256

718d2402272cecf27c334fa1e9c0688feffe149493bdda4806307868ce595a7c
SHA512

6be14900a924e05b71831a43f0d5a6b8c7ab1587a81fbd5d5bb069b45a3c0e2b8f267db16cca55ec2c6a40ca2ec4dbb18779e943438df7ac7d8cf91add950b3d
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9hQ7:b7o/2n1TCraU6GD1a4Xt9u

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-22_945e3cf5c87efd9f24724bc9100e4ee7_cryptolocker

Files

2024-01-22_945e3cf5c87efd9f24724bc9100e4ee7_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ