Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_e8633f778a79aad33c5857a321008f23_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_e8633f778a79aad33c5857a321008f23_cryptolocker.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-05_e8633f778a79aad33c5857a321008f23_cryptolocker
-
Size
39KB
-
MD5
e8633f778a79aad33c5857a321008f23
-
SHA1
bd895397a0baa18d0f6db58212eb16ae98ef293b
-
SHA256
8ac737e026871a97c7fb59606aa8aafac245b54ab2eb8a9f65e4a4ca1dc997e8
-
SHA512
67307a866b975a8490c3de53e8735c6bd84a5c05887ea3dc29e156c5039ec732a86d33eff3d7e13cd5b049f49a25aeb8061c8a82488ec7ef4e9d21b5d7b882cc
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenRlq:ZzFbxmLPWQMOtEvwDpjLeDq
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-05_e8633f778a79aad33c5857a321008f23_cryptolocker
Files
-
2024-04-05_e8633f778a79aad33c5857a321008f23_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ