Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_79cbe30129051a1f92da05b0f94dcabe_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-04_79cbe30129051a1f92da05b0f94dcabe_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-04_79cbe30129051a1f92da05b0f94dcabe_cryptolocker
-
Size
126KB
-
MD5
79cbe30129051a1f92da05b0f94dcabe
-
SHA1
1a72a8fb935a3986de75ba6ca262b7f5b937f646
-
SHA256
3e902173b0cd4dd96fd3a8ca1798919a2cc55492934f24f060cc1324a50dc281
-
SHA512
623761e5c01eb4c1f9753212e586cb0a995a0a1af25261e3f15d7bb69cf273fe12f1b437e7e5abd7d6879d132c576ad1f6aaaa3d38769a3ab5f3bce2ae8382c0
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpv:vCA9OtEvwDpjT
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-04_79cbe30129051a1f92da05b0f94dcabe_cryptolocker
Files
-
2024-02-04_79cbe30129051a1f92da05b0f94dcabe_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE