Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_f123300e93f483228c7d60c32f264eba_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-05_f123300e93f483228c7d60c32f264eba_cryptolocker.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-05_f123300e93f483228c7d60c32f264eba_cryptolocker
-
Size
53KB
-
MD5
f123300e93f483228c7d60c32f264eba
-
SHA1
21a81d69257655041e82832476b1d9827f8c92be
-
SHA256
488626e472426003005ca83019e4a32be9d16f4b959d4c4cf3e8f2b16d1894da
-
SHA512
052f3f79786809b6ac1b59c6939f47639f51527703a052e641412dd5e93805de5f4571bf2a85b98deb90772c2a04b06b18e01e44d3aebd5dfae69016c916bcb2
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO58c:ZVxkGOtEvwDpjcz
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-05_f123300e93f483228c7d60c32f264eba_cryptolocker
Files
-
2024-03-05_f123300e93f483228c7d60c32f264eba_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ