Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_a127a63d8fe723570e601707ea1c9278_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-24_a127a63d8fe723570e601707ea1c9278_cryptolocker.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-24_a127a63d8fe723570e601707ea1c9278_cryptolocker
-
Size
58KB
-
MD5
a127a63d8fe723570e601707ea1c9278
-
SHA1
46c76d7baf4c03199cd4c78a41299e3881b49e23
-
SHA256
3d509c484ec3a74057cd1c496d5e29c3f1548dfd34a8d3eeb5e57231069e3c33
-
SHA512
dae2f7bd7a72d422fee7398d5d6e35bf1f39ef2ede30005a6ba6bbe057da3432a5356d3535a63e6185f8e2287cdaff071abde3c4d86678781c4fbd89d640f1b6
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoYPO+lxm6:ZzFbxmLPWQMOtEvwDpj38lD/cMAT+lD
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-24_a127a63d8fe723570e601707ea1c9278_cryptolocker
Files
-
2024-02-24_a127a63d8fe723570e601707ea1c9278_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ