2024-05-28_df02da677df4b7ce2112c435a8684911_cryptolocker | Triage

Sharing

General

Target

2024-05-28_df02da677df4b7ce2112c435a8684911_cryptolocker
Size

37KB
MD5

df02da677df4b7ce2112c435a8684911
SHA1

a44aa05a6be02476fd1e743a6fb915da45aa3ce1
SHA256

897aa73a3a5470df4e86510b3006248932d76d16eb2a42f1629fc62d00a78c6c
SHA512

cfa125a4e7c4ed041dd1c6ab9b000aaa03c90c99774e69a20d1b2e2ea2706a9104a54c1591cd98ace7225484006ab19b86b10cf31f648b828a9b0e1b9889ff98
SSDEEP

768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mrA:bc/y2lLRU6zA6qc

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-28_df02da677df4b7ce2112c435a8684911_cryptolocker

Files

2024-05-28_df02da677df4b7ce2112c435a8684911_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ