Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_e95653f6982e29609ac9224e01032084_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_e95653f6982e29609ac9224e01032084_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-29_e95653f6982e29609ac9224e01032084_cryptolocker
-
Size
68KB
-
MD5
e95653f6982e29609ac9224e01032084
-
SHA1
738f8130c5188b9d96c9c4de767faae3cd0472c5
-
SHA256
18d1e60f05beb911f3da03e6d2faafc06e7c4cc39eff83a6f4cde6f78d251b65
-
SHA512
86826fa0ddc0afccaff835003996f36f4a5197b4eac557fb50923df6208f787899a402caf2649a2d99e970ea2a3be52fd86ea0be81feb04627858773dd7aa7d0
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZC:DW60sllyWOtEvwDpjwF85k
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-29_e95653f6982e29609ac9224e01032084_cryptolocker
Files
-
2024-01-29_e95653f6982e29609ac9224e01032084_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.uzwvn Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ