Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_3d8b17b982e7a57474f710a926ca5f97_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_3d8b17b982e7a57474f710a926ca5f97_cryptolocker.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-08_3d8b17b982e7a57474f710a926ca5f97_cryptolocker
-
Size
38KB
-
MD5
3d8b17b982e7a57474f710a926ca5f97
-
SHA1
fd6c7882da624b3c815ecf30f96e8546f03691f7
-
SHA256
5083377cda754dd4fd94acb1629f9db597caa04a7bbc9e312892a27365c11b40
-
SHA512
e0baedbad326a46246622e607183ae69ce3b0225869ea81756076990387df6006db9e48cb2500d18c7c39ab32ce7a2d003519f4d7f8a549f06a99dc1a0a31173
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenB8vfK:ZzFbxmLPWQMOtEvwDpjLeSfK
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-08_3d8b17b982e7a57474f710a926ca5f97_cryptolocker
Files
-
2024-03-08_3d8b17b982e7a57474f710a926ca5f97_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ