Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_1e417f11e65db7df5f79b5548a390a59_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_1e417f11e65db7df5f79b5548a390a59_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-12_1e417f11e65db7df5f79b5548a390a59_cryptolocker
-
Size
65KB
-
MD5
1e417f11e65db7df5f79b5548a390a59
-
SHA1
e14bc7b3368b9463b3ce1b9f8463fbb09ac0fce8
-
SHA256
0c79f78ca4bb1be825629ee6bb59026e87e9209c1757a04d20d963a80ccf9e1f
-
SHA512
a27cc7c9b675a8f1ffe75230688bfd9e8d5f372685cd56ee88bc617f3c9cccfaa6ad7803268eb8701729cebdaafe40002c7c8ab5641a38296d2d5279a252feac
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbVj:ZVxkGOtEvwDpjcawp
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_1e417f11e65db7df5f79b5548a390a59_cryptolocker
Files
-
2024-02-12_1e417f11e65db7df5f79b5548a390a59_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ