2024-04-28_9024230ea0359dfc3f71684d5439cedb_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-28_9024230ea0359dfc3f71684d5439cedb_cryptolocker
Size

33KB
MD5

9024230ea0359dfc3f71684d5439cedb
SHA1

82fe0cd21cf3e2d00e09265ee9b5058f0a7bc8a0
SHA256

b22ec00e4b4ea3d390055f2553a9701a3d4d7ba40cf91119ed193c15c3294f12
SHA512

53e36acdfcbfbccb3aa17de69551507afe091701fa3c6d1e24844caec4c8d4813f44399f18d4a644df7b6dc26cce14b52984394984d924a521ced89cd92d7772
SSDEEP

768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Mk:bxNrC7kYo1Fxf2rYAk

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-28_9024230ea0359dfc3f71684d5439cedb_cryptolocker

Files

2024-04-28_9024230ea0359dfc3f71684d5439cedb_cryptolocker
.exe windows:5 windows x86 arch:x86

3c4da9ed0ba02990af7795e358bfd650

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
ShowWindow
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ