Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_f77395ace3506ecbb5e4fd56002d3af3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-15_f77395ace3506ecbb5e4fd56002d3af3_cryptolocker.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-15_f77395ace3506ecbb5e4fd56002d3af3_cryptolocker
-
Size
38KB
-
MD5
f77395ace3506ecbb5e4fd56002d3af3
-
SHA1
fbddf1d422dd67f6b365a5d39b513ba240bbd54e
-
SHA256
8b13dfd619382a3d7ca3545bb350a49766ba8004b781f73d5ff14cb57113a059
-
SHA512
b44ef02aa911550691557835f62006682912a4e353873361ef7769912c310b8886970cfccc34a861a0946aa5ba9dc3402465a166066831e7cdae5ec544e751f7
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpm:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL0
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-15_f77395ace3506ecbb5e4fd56002d3af3_cryptolocker
Files
-
2024-04-15_f77395ace3506ecbb5e4fd56002d3af3_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.yya Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ