Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_1c1d38cde5cc045a9891362f7c864dd8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_1c1d38cde5cc045a9891362f7c864dd8_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-28_1c1d38cde5cc045a9891362f7c864dd8_cryptolocker
-
Size
36KB
-
MD5
1c1d38cde5cc045a9891362f7c864dd8
-
SHA1
8c86dc9c2762d0b49c004680284aff120d5ea6ec
-
SHA256
f15648bdae37d7c0a513f6d3f945e0836989f4efaef2dca1bdc111cd1c399d09
-
SHA512
44ee6641fd94e95c319d84184da708664962bc406207316b7ccc4d8db000816ddba2031a6f843ec7254602dd57affc6ecb3a98a6c10b8db67b816b26bae300c6
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenbB:ZzFbxmLPWQMOtEvwDpjLeN
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-28_1c1d38cde5cc045a9891362f7c864dd8_cryptolocker
Files
-
2024-01-28_1c1d38cde5cc045a9891362f7c864dd8_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ