2024-01-25_3988b5e4f2fb15c93546addf5cd1b27c_cryptolocker

General

Target
2024-01-25_3988b5e4f2fb15c93546addf5cd1b27c_cryptolocker
Size 47KB
Sample240125-vzvbzabfa9
SHA256 6e0d7d203cc3c2bcc882d65f9d4f2ba2fc8f8f6d834df5a04de014e8aa5103bf
MD5 3988b5e4f2fb15c93546addf5cd1b27c
SHA1 b0f3daf940f160b7a9e15f19f3bfd58bf1b80dba
SHA512 5b637f75c19726bc149e1bda825d1c32d4e619d0e7df628bba1b07093e66ec840204c928e753142cf5ba68be4f11e27cd43fbf71d1a30a409394444fe2742ef4
SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/3lQIqK:XS5nQJ24LR1bytOOtEvwDpjNbP/3lL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-25_3988b5e4f2fb15c93546addf5cd1b27c_cryptolocker

IMPHASH e021c9fc2c12265365fad587d43783fe
SHA256 6e0d7d203cc3c2bcc882d65f9d4f2ba2fc8f8f6d834df5a04de014e8aa5103bf
MD5 3988b5e4f2fb15c93546addf5cd1b27c
SHA1 b0f3daf940f160b7a9e15f19f3bfd58bf1b80dba
SHA512 5b637f75c19726bc149e1bda825d1c32d4e619d0e7df628bba1b07093e66ec840204c928e753142cf5ba68be4f11e27cd43fbf71d1a30a409394444fe2742ef4
SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/3lQIqK:XS5nQJ24LR1bytOOtEvwDpjNbP/3lL
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

5

Entry point

41183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths