Static task
static1
Behavioral task
behavioral1
Sample
38f85a6228f66036cc193316bced7343_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
38f85a6228f66036cc193316bced7343_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
38f85a6228f66036cc193316bced7343_cryptolocker_JC.exe
-
Size
100KB
-
MD5
38f85a6228f66036cc193316bced7343
-
SHA1
67f0600228d8b47ff0895fece774e2bf2870c6c7
-
SHA256
b8d4e7009755fc9802a9f55aa67403f7836fd1271174317aeec0271590feb46a
-
SHA512
0c2f1e59428c512e0ae83374509df553bd76b4280b4a3dd99ee24573217eb086d364a2effc7fb609f888ec9b7ad1f1fee14dd7b7d2c6b5bd84f3b9c41302a953
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWCCy9In:xj+VGMOtEvwDpjubwQEIiedn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f85a6228f66036cc193316bced7343_cryptolocker_JC.exe
Files
-
38f85a6228f66036cc193316bced7343_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE