Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_70f088a8b0700644065406b570b271be_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_70f088a8b0700644065406b570b271be_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-23_70f088a8b0700644065406b570b271be_cryptolocker
-
Size
51KB
-
MD5
70f088a8b0700644065406b570b271be
-
SHA1
6490caab8a1c6242ff234d0c3467527047a06247
-
SHA256
3fdd5ac52891171ab406dc18613aee190e19b0c9af9b199b6eaa9f506bca1783
-
SHA512
1e5d36890fe5f7effe4b4db297d74d78184ff9eae48441350cfda1d580dd7a79205500592097d16a7d0a55fa1ef87032a8674fdc1f0aeeda8f32f26a149c799d
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5S:ZVxkGOtEvwDpjcw
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-23_70f088a8b0700644065406b570b271be_cryptolocker
Files
-
2024-01-23_70f088a8b0700644065406b570b271be_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ