Static task
static1
Behavioral task
behavioral1
Sample
524f3a73ed7e6932d74a66002062fbc84b06f1682afadc3dca078dd2bc57e54b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
524f3a73ed7e6932d74a66002062fbc84b06f1682afadc3dca078dd2bc57e54b.exe
Resource
win10v2004-20240226-en
General
-
Target
524f3a73ed7e6932d74a66002062fbc84b06f1682afadc3dca078dd2bc57e54b
-
Size
38KB
-
MD5
9eb51adf267fd06cae2cb1ae36ef3130
-
SHA1
207c336be2b0a6b34b1a236c1729649bcc780953
-
SHA256
524f3a73ed7e6932d74a66002062fbc84b06f1682afadc3dca078dd2bc57e54b
-
SHA512
fec97eb117106b244eca70ca2bcfc8b979c9451f2ca240e674e591d3b7201e1e4d474eff5b8d961ff694eb0779154aeb632d93de2c46264f23006b84e72448fa
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenU1:ZzFbxmLPWQMOtEvwDpjLe0
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 524f3a73ed7e6932d74a66002062fbc84b06f1682afadc3dca078dd2bc57e54b
Files
-
524f3a73ed7e6932d74a66002062fbc84b06f1682afadc3dca078dd2bc57e54b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ