Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_c440868f02ce952edbc3532993c2f92b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_c440868f02ce952edbc3532993c2f92b_cryptolocker.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-13_c440868f02ce952edbc3532993c2f92b_cryptolocker
-
Size
77KB
-
MD5
c440868f02ce952edbc3532993c2f92b
-
SHA1
8395eb49071deafa30d0b92d9b97584a2fe96bfc
-
SHA256
9e7b4c9d889a19c3e93580bdd0d354c7f4583d9f477b72364be3d7a93dc37e78
-
SHA512
754167069a2ad282800f77f9360fd3e34e554c9ac78ca9f2eb97b61b14a5b4839f804d52ccac5059821ee3b12922993bdc11b212ac891f56dddf7e56851aeb5b
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTOJ:ZVxkGOtEvwDpjcax1
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-13_c440868f02ce952edbc3532993c2f92b_cryptolocker
Files
-
2024-03-13_c440868f02ce952edbc3532993c2f92b_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ