2024-06-01_48ec5ea42d812de19f0813a6824f2e91_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_48ec5ea42d812de19f0813a6824f2e91_cryptolocker
Size

44KB
MD5

48ec5ea42d812de19f0813a6824f2e91
SHA1

310c9bcb82690ed01f76a895eeb2d4adf2dc71be
SHA256

9963e1d8d69ac8530589ff0d70b4ec541702da209d1f2d9ebd96654fc2027598
SHA512

dbffcf4ba9f643692ffe0e35b747d4375cef377a6edceab5ffa1593bc1d09631a32ecfe6ebe6661a78ed890dd1fbd91ab3ebeef98e4f69a589ef6b104f0b27db
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphq89:bc/y2lkF0+Beq89

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_48ec5ea42d812de19f0813a6824f2e91_cryptolocker

Files

2024-06-01_48ec5ea42d812de19f0813a6824f2e91_cryptolocker
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ