Behavioral task
behavioral1
Sample
2fa879dd1859b84a3ffa801527f4c3a2_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2fa879dd1859b84a3ffa801527f4c3a2_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
2fa879dd1859b84a3ffa801527f4c3a2_cryptolocker_JC.exe
-
Size
58KB
-
MD5
2fa879dd1859b84a3ffa801527f4c3a2
-
SHA1
c0be368d08e41dd8f69872666e7fd3b486f6ec2e
-
SHA256
6a4f38a3f64a8e7b779d708d7cf1239b9a57381805f37871e9cc49973328e608
-
SHA512
5cc2516bada322ac610f6bcb1eb0af5bd3a58e274f751c692f13b626da702b217f1924c7ea6640517991e4e38eac5ea34d00b6c51d10e7b911bf6ace26158e49
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelagPXPECuMuE0Xe:zj+soPSMOtEvwDpj4HE9MWe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fa879dd1859b84a3ffa801527f4c3a2_cryptolocker_JC.exe
Files
-
2fa879dd1859b84a3ffa801527f4c3a2_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE