2024-04-06_1679322c9a28120e344dbae07a4c5e2d_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-06_1679322c9a28120e344dbae07a4c5e2d_cryptolocker
Size

32KB
MD5

1679322c9a28120e344dbae07a4c5e2d
SHA1

083d1b68c767dd2d2fcbfd90a42905288d7c21e8
SHA256

96b7b881b7a90a19b80727f99c30f0dd00a3062472837554cec7cea50da6c44f
SHA512

cd1fe65e9eb56aadc15c58137936483365404282be9829c34fb238f1ba50232dca18760439d8c0314c95ed4a8f9dc9481cfcefb0912108504a7aebfa076e8d57
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9RDE1N/:b7o/2n1TCraU6GD1a4Xt9R2

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-06_1679322c9a28120e344dbae07a4c5e2d_cryptolocker

Files

2024-04-06_1679322c9a28120e344dbae07a4c5e2d_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ