Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_5f2e0928e20f947a13df2fd3f80c30ff_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-06_5f2e0928e20f947a13df2fd3f80c30ff_cryptolocker.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-06_5f2e0928e20f947a13df2fd3f80c30ff_cryptolocker
-
Size
42KB
-
MD5
5f2e0928e20f947a13df2fd3f80c30ff
-
SHA1
204ae9b96593cd35ef12e8b72a34bfa1e537f7fa
-
SHA256
26a4a52166c59d7de3ed3e6d158e35c8606d0c1845387c30ee6be9012af07109
-
SHA512
8a9a04860879932f8b4ef153c8fcf7f03bbf5036c67b3a0affb2d0b5b72d5e41f805ac22f7f73fada3931f77ed3dd1c074d883e3ba98bc0ce3cac86d409715b7
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bTv4xv:ZzFbxmLPWQMOtEvwDpjLeU3n4Z
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-06_5f2e0928e20f947a13df2fd3f80c30ff_cryptolocker
Files
-
2024-04-06_5f2e0928e20f947a13df2fd3f80c30ff_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ