Static task
static1
Behavioral task
behavioral1
Sample
2024-06-10_acffcef488f7feb3b595a898449a66a6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-10_acffcef488f7feb3b595a898449a66a6_cryptolocker.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-06-10_acffcef488f7feb3b595a898449a66a6_cryptolocker
-
Size
55KB
-
MD5
acffcef488f7feb3b595a898449a66a6
-
SHA1
8ac31b04a46953556a58da3671d3c32c37e31655
-
SHA256
426305ec5e2a1407df661d34580577ea4b5787982b0c230aa72fcc6619e0cfa2
-
SHA512
d3244a55b59076cf5ebcf55420c630825d78c7270de7922bac6b7d08d43d45a9ce9962d5e3bde3719c82b8ee57744e5dc40641846686e753117bd77e83cbf802
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5Ujg:ZVxkGOtEvwDpjcx
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule sample CryptoLocker_rule2 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-10_acffcef488f7feb3b595a898449a66a6_cryptolocker
Files
-
2024-06-10_acffcef488f7feb3b595a898449a66a6_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ