Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_3317321ed0b1c765af6917bc041b9a1b_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_3317321ed0b1c765af6917bc041b9a1b_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-28_3317321ed0b1c765af6917bc041b9a1b_cryptolocker
-
Size
38KB
-
MD5
3317321ed0b1c765af6917bc041b9a1b
-
SHA1
ea33bd20924e1f47a0120f5f69ecbe5e652f7826
-
SHA256
e105e6dab38017693ddd1d18a926246099ff9e2f507390ae699b6efc4ca7c5d5
-
SHA512
fb45ece700078a6fe16b77a6d138e2db12d6e73eddbd3b58e18e1a46cd2af161fd2ab54aee0da1476df6eefbf463d59bc9bd698540bb3cbfed7284b0cb60e988
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bTs:ZzFbxmLPWQMOtEvwDpjLeU30
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-28_3317321ed0b1c765af6917bc041b9a1b_cryptolocker
Files
-
2024-01-28_3317321ed0b1c765af6917bc041b9a1b_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ