Static task
static1
Behavioral task
behavioral1
Sample
2024-05-25_4a714fbeb6d3b778c3edbfd3f97c205f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-25_4a714fbeb6d3b778c3edbfd3f97c205f_cryptolocker.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-25_4a714fbeb6d3b778c3edbfd3f97c205f_cryptolocker
-
Size
66KB
-
MD5
4a714fbeb6d3b778c3edbfd3f97c205f
-
SHA1
c00d2a9c7559515444ffe4f978ae1309ce36672c
-
SHA256
6fc92e97ecabaa06c1793ef6be8a718aa783ddb74775feee3013e19b0274070b
-
SHA512
d1300a8982cdad47236c12ec94879063b400d23063b0409f8f2b495a400b8d105ec081efe5a33634240d2699cafd4ce22a8d9e7e52751df9872512c43c90f030
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbmh85J:V6a+pOtEvwDpjvC
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-25_4a714fbeb6d3b778c3edbfd3f97c205f_cryptolocker
Files
-
2024-05-25_4a714fbeb6d3b778c3edbfd3f97c205f_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ