2024-02-28_fa5646eaaed9f2d0a025c7f6178673bf_cryptolocker

General

Target
2024-02-28_fa5646eaaed9f2d0a025c7f6178673bf_cryptolocker
Size 47KB
Sample240228-p12vjsbh86
SHA256 102490ee994287723acf5bec44f9de94e5b86d025b20c441fc6ad8594ed9a88a
MD5 fa5646eaaed9f2d0a025c7f6178673bf
SHA1 bd062a2332ed93e0b0cec48a528a9da770871b96
SHA512 908d6693c9168400ff858696132c99cc5cf6982954063668c1d1ac01118f8eae088a39f8da4dacae2f24e93af89f545a1ef72957f3dbdfaf53fc681e00742a19
SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7Ioqbv:XS5nQJ24LR1bytOOtEvwDpjNbP/Moqbv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_fa5646eaaed9f2d0a025c7f6178673bf_cryptolocker

IMPHASH e021c9fc2c12265365fad587d43783fe
SHA256 102490ee994287723acf5bec44f9de94e5b86d025b20c441fc6ad8594ed9a88a
MD5 fa5646eaaed9f2d0a025c7f6178673bf
SHA1 bd062a2332ed93e0b0cec48a528a9da770871b96
SHA512 908d6693c9168400ff858696132c99cc5cf6982954063668c1d1ac01118f8eae088a39f8da4dacae2f24e93af89f545a1ef72957f3dbdfaf53fc681e00742a19
SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7Ioqbv:XS5nQJ24LR1bytOOtEvwDpjNbP/Moqbv
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

5

Entry point

41183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths