Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_7b45b7005188b9662e6034034eb1da51_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_7b45b7005188b9662e6034034eb1da51_cryptolocker.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-08_7b45b7005188b9662e6034034eb1da51_cryptolocker
-
Size
40KB
-
MD5
7b45b7005188b9662e6034034eb1da51
-
SHA1
932e1d97d02420f0e2526f392ee4a3760ba77079
-
SHA256
6eb2433c3dca77bcbd786b4a7d09749b290c0c60f4e80d8a1ddce1a422bdfc25
-
SHA512
a52f336f0b92de8cd483f6c02fed72cf1eb4122b996edf8c6c56b82a5114e5123d94a5287e58da4fb80e5de92394840df6cbcb26958a39224b98bba6c5c12d22
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOk:V6QFElP6n+gMQMOtEvwDpjyaYaFA5
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-08_7b45b7005188b9662e6034034eb1da51_cryptolocker
Files
-
2024-03-08_7b45b7005188b9662e6034034eb1da51_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ