Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_435717ee4635d5d3de7e8ca09bd60fbc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_435717ee4635d5d3de7e8ca09bd60fbc_cryptolocker.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-24_435717ee4635d5d3de7e8ca09bd60fbc_cryptolocker
-
Size
75KB
-
MD5
435717ee4635d5d3de7e8ca09bd60fbc
-
SHA1
0dcd8e378f284ec23ea037e9cc900271488db625
-
SHA256
2f5b9938ab2baab2caf2398c11f1cf8c364072a602d4a95b7da78b9457a3509e
-
SHA512
eaf8a9e49e0864890665e83c5daf6a45617d45828075270a2f6da4557805ab98488adc8ed0b4a8c4673abd169767af1ffda62e77a60ac2edd02a86e04e05abea
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KuU:ZVxkGOtEvwDpjcaQ
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-24_435717ee4635d5d3de7e8ca09bd60fbc_cryptolocker
Files
-
2024-02-24_435717ee4635d5d3de7e8ca09bd60fbc_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ