2024-02-20_c8c75e567f59f66eee6fa8857263ab3b_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-20_c8c75e567f59f66eee6fa8857263ab3b_cryptolocker
Size

43KB
MD5

c8c75e567f59f66eee6fa8857263ab3b
SHA1

3525f8b7e3952e31b10879ef3f71251c49338302
SHA256

2fbd8a2f5274017eae59370e43fb4da660461ecd697cf6f0e469e06be15a36f5
SHA512

ade9cc70a42b8855d19d9a30029433d8038ba043989013702f4ace6901e41a6733235897f1feb12b2f61b89479576292dc7b2131a1976b76ffb338b7a0e2a8d6
SSDEEP

768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5WPm:btB9g/xtCSKfxLIc/uO

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-20_c8c75e567f59f66eee6fa8857263ab3b_cryptolocker

Files

2024-02-20_c8c75e567f59f66eee6fa8857263ab3b_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ