Static task
static1
Behavioral task
behavioral1
Sample
2cd781a537d531535333f7b2cdac63bf_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2cd781a537d531535333f7b2cdac63bf_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
2cd781a537d531535333f7b2cdac63bf_cryptolocker_JC.exe
-
Size
30KB
-
MD5
2cd781a537d531535333f7b2cdac63bf
-
SHA1
269d95b71eeff09608e04079cc12df6a5dedbaca
-
SHA256
10da86d3989805b167ee8861edaecbe91a4290819fc967499c3a38ce2f800c1a
-
SHA512
c93819cd382d120325566dd39454aa1b9cc98d29231cde4fdf1d3ab084e3402df5a6847a579aa4c7f4c506039431140c02a658d1e69341b6be7ce7715f9d3a29
-
SSDEEP
768:q0ZziOWwULueOSdE8tOOtEvwDpjej4AY3xKvyz:q0zizzOSxMOtEvwDpjC3IMvW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd781a537d531535333f7b2cdac63bf_cryptolocker_JC.exe
Files
-
2cd781a537d531535333f7b2cdac63bf_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE