2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker | Triage

Sharing

General

Target

2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker
Size

37KB
MD5

b12a57a4a4ede49163afdcb6018111ce
SHA1

1be18aeaa81d7f0379e4626d728b67274b203f10
SHA256

0cafa70a39e7ed7d07bfc58b964aade9d148a56bf4fee92ab220eedcdbc6629d
SHA512

ef29f5c628af55741ab9d580dfeeb8e1194d088e29127b7adbab9e3ff87ccbdae5571bea087fb2bcd9cf296805b1d00479e2be57686004ac274e81d1a3a94444
SSDEEP

768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mM:bc/y2lLRU6zA6qM

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker

Files

2024-05-01_b12a57a4a4ede49163afdcb6018111ce_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ