Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_784d3302f1e5994b92de35ea3acfa515_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_784d3302f1e5994b92de35ea3acfa515_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-29_784d3302f1e5994b92de35ea3acfa515_cryptolocker
-
Size
63KB
-
MD5
784d3302f1e5994b92de35ea3acfa515
-
SHA1
181b5ebf6474db4f313b4088562b3a27ad566d14
-
SHA256
8dadde519e1d5fa23335d702d06e86fc6dbff90fc6b8a2b617cc18570b23a9e2
-
SHA512
5b74274f7795d76e24cfb76e4473a4712c7082aa4ec31a7085cd4ff7c053aaa29475071680553106f21645c47329f7ad626b9263065e45f05e17dcf419702ded
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVM:ZVxkGOtEvwDpjcawy
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-29_784d3302f1e5994b92de35ea3acfa515_cryptolocker
Files
-
2024-01-29_784d3302f1e5994b92de35ea3acfa515_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ