2024-02-22_37f53717ced76e2a4555a509ae0f5604_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-22_37f53717ced76e2a4555a509ae0f5604_cryptolocker
Size

32KB
MD5

37f53717ced76e2a4555a509ae0f5604
SHA1

43aa25d16bb10bee7f3789b3f13259f4ce0b0c1e
SHA256

0a8443dc0520d4553e599e6fecec150471d25a78af8a74a676ce52b9a2dd413c
SHA512

65be58d6c0e0883487b46e88504cce9b8d4dacf826b52c730aedc635be8c83b818b9b97ff05c833ca80a0457e73668230f754a23e944ceb5bad5f3727ff3fd71
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+OOa:b7o/2n1TCraU6GD1a4Xt9hl

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-22_37f53717ced76e2a4555a509ae0f5604_cryptolocker

Files

2024-02-22_37f53717ced76e2a4555a509ae0f5604_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ