Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_c0fed3456391c04d326dd4159981ef76_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-15_c0fed3456391c04d326dd4159981ef76_cryptolocker.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-15_c0fed3456391c04d326dd4159981ef76_cryptolocker
-
Size
42KB
-
MD5
c0fed3456391c04d326dd4159981ef76
-
SHA1
4cb80f4c16f77729fdcb05945935e51d36739d52
-
SHA256
e0aa5c9f7bfaa6c3c43569f4f441790d100192cdd3736199de3991c25158b2cc
-
SHA512
cd6ec9c3e049e37f2a8ee5b011efedb04512d50e1705781382c7db11ce2cd09853d3760ada3b123edaf4bcc67f0611f6121dcd0d6011275feb5af72859a5c5b5
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7x7x:ZzFbxmLPWQMOtEvwDpjLeJAsKcb79x
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-15_c0fed3456391c04d326dd4159981ef76_cryptolocker
Files
-
2024-05-15_c0fed3456391c04d326dd4159981ef76_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ