2024-05-16_19fb1aee151f00baecbe8d89db5597de_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-16_19fb1aee151f00baecbe8d89db5597de_cryptolocker
Size

38KB
MD5

19fb1aee151f00baecbe8d89db5597de
SHA1

34ea7269538089a19a823ea31726e79bfe2cb0a3
SHA256

ac0b76147c5f3b50583fab2eb5134e8dff014c0bd361d5f126477528d4edebd6
SHA512

5281ec6d78a81af2fbdbb8e68d4bf4fc79b8e1b42e48664ca521974f8291ec2f29286a574d614678b35108c990254e63818d6c006896ce18c78b4104dd6dae97
SSDEEP

768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36xpQ:bc/y2lLRU6zA6lpQ

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-16_19fb1aee151f00baecbe8d89db5597de_cryptolocker

Files

2024-05-16_19fb1aee151f00baecbe8d89db5597de_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ