2024-01-23_062c7ed651a8b7a4fa621b3ec0a9e5d3_cryptolocker | Triage

Sharing

General

Target

2024-01-23_062c7ed651a8b7a4fa621b3ec0a9e5d3_cryptolocker
Size

60KB
MD5

062c7ed651a8b7a4fa621b3ec0a9e5d3
SHA1

519c506ca034180440103afb52162300f3f97543
SHA256

5223185c43c4524ca5048d54acb9dc284b69a9a3cab1c4eccf950c9288c2a1b5
SHA512

2f6d63d3099daaaf85ad53f77c8b8b184965b2bfde229c6cd9cfd72f0f8036e04ff03107f9ec72c2fa56d16811f39f07e811d16bf59c46ddfef912ff658eca73
SSDEEP

768:F6LsoEEeegiZPvEhHSG+g2QgQtOOtEvwDpjB:F6QFElP6n+g3gQMOtEvwDpjB

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

resource	yara_rule
sample	CryptoLocker_set1

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-23_062c7ed651a8b7a4fa621b3ec0a9e5d3_cryptolocker

Files

2024-01-23_062c7ed651a8b7a4fa621b3ec0a9e5d3_cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rlwEs
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.wdbm
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.epwjdwx
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RisVgtS
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.zKnY
Size: 1024B - Virtual size: 753B

IMAGE_SCN_MEM_READ