Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_2e08a04cf694a9f07ecf6d16121ef3fc_cryptolocker.exe
Resource
win7-20231215-en
General
-
Target
2024-01-25_2e08a04cf694a9f07ecf6d16121ef3fc_cryptolocker
-
Size
56KB
-
MD5
2e08a04cf694a9f07ecf6d16121ef3fc
-
SHA1
5c8f711392db144f7283651e4e12419f9339cdfe
-
SHA256
73a16ec2fc5f3098f7a4c61e8797bcd04ac5d366bffc96fce95c152a47d0dea5
-
SHA512
77ad0a811cbe2b850b0ba1ad64f99ca76ad68117427f1192edfb4fb2796e8f66e1166bc874aae0b85f5ba4f1f1f5a06d19b560c884257b7d0d724ba9bae1a982
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61PTH:BbdDmjr+OtEvwDpjM1
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-25_2e08a04cf694a9f07ecf6d16121ef3fc_cryptolocker
Files
-
2024-01-25_2e08a04cf694a9f07ecf6d16121ef3fc_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE