Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_08f9df4894f9ebbb721fddeaaea88616_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_08f9df4894f9ebbb721fddeaaea88616_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-29_08f9df4894f9ebbb721fddeaaea88616_cryptolocker
-
Size
49KB
-
MD5
08f9df4894f9ebbb721fddeaaea88616
-
SHA1
b37d9b1981f9c29655a813e6081f9d672c020c5e
-
SHA256
63e748eb1d9d64e76e6541030cc828a908cae54f3bd24555b6bb52a21d9f97bd
-
SHA512
6c22a464009f90f17f65e2add6d1db255f4d45dfc8a7e8992daf9a057f9dbebf46888786e802ea4400f2aa4ea1582c8a0a938c5fa9f91f6941cddf281ce7563a
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXpQenhu8F:V6QFElP6n+gMQMOtEvwDpjeJQ7pojkRE
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-29_08f9df4894f9ebbb721fddeaaea88616_cryptolocker
Files
-
2024-01-29_08f9df4894f9ebbb721fddeaaea88616_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ