2024-05-03_59d9191c3bc669572a47cd192cbeab4c_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-03_59d9191c3bc669572a47cd192cbeab4c_cryptolocker
Size

61KB
MD5

59d9191c3bc669572a47cd192cbeab4c
SHA1

bdc81687c24ff7ca89f3c6c8bd667f4e3b92eb26
SHA256

35da3a297fd32e180c5c19f24068311b8b6e61f980a9cf075ce915bea2af40ed
SHA512

759c6757936fac232be81d32ce35a2bb0517bfff9e812b49460062688ce27f1e6740cff26214bfcf8f35aa2c016a84d0b5e2a4dad50203141cfd647d88481c03
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnr:btng54SMLr+/AO/kIhfoKMHdar

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-03_59d9191c3bc669572a47cd192cbeab4c_cryptolocker

Files

2024-05-03_59d9191c3bc669572a47cd192cbeab4c_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ