Static task
static1
Behavioral task
behavioral1
Sample
36a51fa67486525fb64996acac468eb0_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
36a51fa67486525fb64996acac468eb0_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
36a51fa67486525fb64996acac468eb0_cryptolocker_JC.exe
-
Size
53KB
-
MD5
36a51fa67486525fb64996acac468eb0
-
SHA1
57d656b97e51fb7ac6f327a06f9f251f6172e284
-
SHA256
9f4e10f490563bcf06e3ea8ed5465fc4b4b213ff06096b6c31675581e7699a75
-
SHA512
0c0cc05bf789581df8b734d6a6f05bfcbf4684c1971f34d9e1b1cec6a80f1bcc87f1300404a50a8413fb026cc14304b49da459f7b2a048a431bff2d1f1b52ba8
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoYqHFQ:ZzFbxmLPWQMOtEvwDpj38lD/cMA3HO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a51fa67486525fb64996acac468eb0_cryptolocker_JC.exe
Files
-
36a51fa67486525fb64996acac468eb0_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ