Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_8ac64ac5ed6bb92beba14506922ced72_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_8ac64ac5ed6bb92beba14506922ced72_cryptolocker.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-24_8ac64ac5ed6bb92beba14506922ced72_cryptolocker
-
Size
46KB
-
MD5
8ac64ac5ed6bb92beba14506922ced72
-
SHA1
b13735259f66220c24f6c7670a6cf5e00de1a5b4
-
SHA256
7a7b6ae69db67ea207fc6dcc21262c61490f1fae753dbf5c92ec7dd85bb444f4
-
SHA512
3b64efc8d578d80b9a08d2e30c85685c140ad712b6df8dada5d11581b9c4018ecbe2c15645c43a83d0eddf1c5dde85935094a935661c0dfa0487ecc813ec8979
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1ws1:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ1b
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-24_8ac64ac5ed6bb92beba14506922ced72_cryptolocker
Files
-
2024-02-24_8ac64ac5ed6bb92beba14506922ced72_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ