Static task
static1
Behavioral task
behavioral1
Sample
2024-10-13_df8bf49dde9480cae43e4333fd67b8cc_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-13_df8bf49dde9480cae43e4333fd67b8cc_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-13_df8bf49dde9480cae43e4333fd67b8cc_cryptolocker
-
Size
35KB
-
MD5
df8bf49dde9480cae43e4333fd67b8cc
-
SHA1
ca94d526a0435b7302ec1f718e4b22a5306f8e79
-
SHA256
5898f0c34c4c1da70203c0c8446e892af5806bebaa1d697b49f4f1e2cbbbf960
-
SHA512
e8edbcf5793c51df6bd41d4264c04595cd19dbd29cc13be520d3b1143524d99f41e82867f1c42f6bfeb23b7b82e01c3df7d40afab6e21ab592b357630d88e394
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nbm:bAvJCYOOvbRPDEgXrNekd7l94i3pm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-13_df8bf49dde9480cae43e4333fd67b8cc_cryptolocker
Files
-
2024-10-13_df8bf49dde9480cae43e4333fd67b8cc_cryptolocker.exe windows:5 windows x86 arch:x86
5a4767bc6f06914cff6e249c178e3b95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
DrawTextA
EndPaint
BeginPaint
PostQuitMessage
ShowWindow
UpdateWindow
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA
gdi32
CreateFontIndirectA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ