2024-01-25_19ef5f2c0b668b9898458c3c18eb1571_cryptolocker

Sharing

Copy URL Twitter E-mail

General

Target
2024-01-25_19ef5f2c0b668b9898458c3c18eb1571_cryptolocker
Size 55KB
Sample240125-vx9zmscdhj
SHA256 f4c5c530a31fcd80540778349c53b1487a03ef4a828d5f6a7b9e19b32122f7bb
MD5 19ef5f2c0b668b9898458c3c18eb1571
SHA1 1ad4fb5fa4a07375b566155ec38cf2c8265ec939
SHA512 9bfd38c98ed23885b0ec788f7258ad7ade967c6feccf48c7884749757198a5a77d37a52f5223a7919a7514dad38689fcf312751e1e3bef4c69a9c29448b5fb39
SSDEEP 768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylsPxAy:79mqyNhQMOtEvwDpjBPY7xv3gy5Z
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

resource	yara_rule
sample	CryptoLocker_set1

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-25_19ef5f2c0b668b9898458c3c18eb1571_cryptolocker

File Explorer

2024-01-25_19ef5f2c0b668b9898458c3c18eb1571_cryptolocker

.exe 55KB

2024-01-25_19ef5f2c0b668b9898458c3c18eb1571_cryptolocker

IMPHASH 7ba3aa8366ce167c7a77ebd6e6fea8e5
SHA256 f4c5c530a31fcd80540778349c53b1487a03ef4a828d5f6a7b9e19b32122f7bb
MD5 19ef5f2c0b668b9898458c3c18eb1571
SHA1 1ad4fb5fa4a07375b566155ec38cf2c8265ec939
SHA512 9bfd38c98ed23885b0ec788f7258ad7ade967c6feccf48c7884749757198a5a77d37a52f5223a7919a7514dad38689fcf312751e1e3bef4c69a9c29448b5fb39
SSDEEP 768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylsPxAy:79mqyNhQMOtEvwDpjBPY7xv3gy5Z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rlwEs

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.wdbm

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.epwjdwx

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.RisVgtS

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.zKnY

Size

1024B

Virtual Size

753B

Characteristics

IMAGE_SCN_MEM_READ

2024-01-25_19ef5f2c0b668b9898458c3c18eb1571_cryptolocker

user32

kernel32

gdi32

generic