Static task
static1
Behavioral task
behavioral1
Sample
2024-02-11_b5f1cec3d4f5600d742fc0671e4ae874_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-11_b5f1cec3d4f5600d742fc0671e4ae874_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-11_b5f1cec3d4f5600d742fc0671e4ae874_cryptolocker
-
Size
45KB
-
MD5
b5f1cec3d4f5600d742fc0671e4ae874
-
SHA1
31cd1d3fc2496c3c266d5aa1e634d843d95d0cee
-
SHA256
47cf5766560768789a7b85578d208783040c8deff9c513a197b1da836aa48e86
-
SHA512
ba36a639b7177ba920960ac81e02961b85c6212d5326d51b38084e814b4e56ad28ff5db4fb833083fe59638bd79da9ec8d7d1e79889e89d13bbbe35fef0fe382
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MocBv:qmbhXDmjr5MOtEvwDpj5cDtKkQZQSp
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-11_b5f1cec3d4f5600d742fc0671e4ae874_cryptolocker
Files
-
2024-02-11_b5f1cec3d4f5600d742fc0671e4ae874_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE