Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_95710367d577508ef9ebc20a11c39e80_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-26_95710367d577508ef9ebc20a11c39e80_cryptolocker.exe
Resource
win10v2004-20240319-en
General
-
Target
2024-03-26_95710367d577508ef9ebc20a11c39e80_cryptolocker
-
Size
39KB
-
MD5
95710367d577508ef9ebc20a11c39e80
-
SHA1
0bc5595ecbdbb92106397d5153d837dc31047dc4
-
SHA256
eb0f3c34153002df462b4f1e732faeff3ff92d24a6fb07cd6ab36422a0e7b953
-
SHA512
3d123d56ed6d41d76a0b62969c891f99af6ba158428bb769f2d16801a6ca1b914f3a369259423add58a0159bfd535500dc064434c433828663ffac593f05a179
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenB8vfd+:ZzFbxmLPWQMOtEvwDpjLeSfw
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-26_95710367d577508ef9ebc20a11c39e80_cryptolocker
Files
-
2024-03-26_95710367d577508ef9ebc20a11c39e80_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ