Static task
static1
Behavioral task
behavioral1
Sample
28f56c9931b54429f3493647b8e6088d_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
28f56c9931b54429f3493647b8e6088d_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
28f56c9931b54429f3493647b8e6088d_cryptolocker_JC.exe
-
Size
74KB
-
MD5
28f56c9931b54429f3493647b8e6088d
-
SHA1
1d4e64ddb51622791d53f0b8017f7ecb0dd29bf1
-
SHA256
28f9ce7d76504b92ae13b430b1549ea2c23ee5d5cff523964536f82a2b8d0eba
-
SHA512
e624a1719f8794c9dd8115f82cf0c6ce9445fe8b776bba76a8c82d04b73211a55658b0aa2debb9c635ce2d8d8be95d29ffcbc43b388bf6ad7141eb338251da52
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIRAcB:ZVxkGOtEvwDpjcNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f56c9931b54429f3493647b8e6088d_cryptolocker_JC.exe
Files
-
28f56c9931b54429f3493647b8e6088d_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ