2024-04-17_78417b9b1408994896c19e399ec57552_cryptolocker | Triage

Sharing

General

Target

2024-04-17_78417b9b1408994896c19e399ec57552_cryptolocker
Size

42KB
MD5

78417b9b1408994896c19e399ec57552
SHA1

a0b78a1af9ed00c0d0864461c0a53c461de49b6d
SHA256

da1451ddb5a12727f35ab081dfa00b54199c00f17cd8c77b78d93e8920e7d240
SHA512

9cafb1e434a391f50a0c9aab70c72934af84187be26fe696294f103419780ce65306a80031440a87f5a1bc4b28f004881e5ca5fe07f168bca66f2ee0d78cd3c4
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqV:bc/y2lkF0+BeqV

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-17_78417b9b1408994896c19e399ec57552_cryptolocker

Files

2024-04-17_78417b9b1408994896c19e399ec57552_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ