Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_0bd759cd2cba3302760db0c9a8aef3ea_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_0bd759cd2cba3302760db0c9a8aef3ea_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-03-27_0bd759cd2cba3302760db0c9a8aef3ea_cryptolocker
-
Size
38KB
-
MD5
0bd759cd2cba3302760db0c9a8aef3ea
-
SHA1
371754753cea0e0c241c155d53cb24872538c80a
-
SHA256
d068f271fc88e169f69e4ccfa2d414979226d9c2ccdf567d7243d46dcc298a41
-
SHA512
044563f7574fb5bcf960ab1d3b77e77e8a29a3db62d612cc2889c817511009c6deef132ea2719799c3a2abbb4d83eee4f9cde47cd54301634c5ad6d730c38cd8
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAYLPv:ZzFbxmLPWQMOtEvwDpjLeJAYb
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-27_0bd759cd2cba3302760db0c9a8aef3ea_cryptolocker
Files
-
2024-03-27_0bd759cd2cba3302760db0c9a8aef3ea_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ