Static task
static1
Behavioral task
behavioral1
Sample
31ec5ee3c3aef2054e40b812e709ad9e_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
31ec5ee3c3aef2054e40b812e709ad9e_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
31ec5ee3c3aef2054e40b812e709ad9e_cryptolocker_JC.exe
-
Size
74KB
-
MD5
31ec5ee3c3aef2054e40b812e709ad9e
-
SHA1
d2c69b7627cf227fa6dfaa7aed84ba66792e9a13
-
SHA256
9730a3746d9d9c091953fc2741a4b14b244550b95febaa525521f2bff821a7e7
-
SHA512
8f4494c976d22081e0b47c81e57fdfaeaee14c578eefa1659fa44b49d0ec707f2897c6fbfba43e9e91e3fa3443c998cce0b73bb92f50b349e16813e7fef83a64
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIRAcP:ZVxkGOtEvwDpjcNo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31ec5ee3c3aef2054e40b812e709ad9e_cryptolocker_JC.exe
Files
-
31ec5ee3c3aef2054e40b812e709ad9e_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ