Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker
-
Size
87KB
-
MD5
d84798cddf27a0aa11469bb3e63cb65c
-
SHA1
ca2e54e6a06623eb705a3b1c03bfdde624f87020
-
SHA256
d3773c1be96aeaed7e1692f0ba92f1d4266b5cf048b7370439e2e6525475ed87
-
SHA512
97a32568de7e56f142171e6135f02e700e1a716682601abed1cbea22dbda7a68db201b620ba580772b7af3ffb27aea704014e54277f740557d49708457e13b4e
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6az:V6a+pOtEvwDpjvpn
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Detection of Cryptolocker Samples 1 IoCs
resource yara_rule sample CryptoLocker_set1 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker
Files
-
2024-06-01_d84798cddf27a0aa11469bb3e63cb65c_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ