Static task
static1
Behavioral task
behavioral1
Sample
488020baf9567c636dcae5c1b08e4ae6_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
488020baf9567c636dcae5c1b08e4ae6_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
488020baf9567c636dcae5c1b08e4ae6_cryptolocker_JC.exe
-
Size
54KB
-
MD5
488020baf9567c636dcae5c1b08e4ae6
-
SHA1
1c4b0e91a5b006c493c9b26ae733c524a30494dc
-
SHA256
d648c120a4b20c968106114eb46599168adb65b253c52b7564192ce512e5fc1c
-
SHA512
0fd3d58de8dac2efb1c547b8528d4d0ab3dce7a42df2f26573dfb523a89c8889a7e619d91061c8d52be767f0b36fa25c5b8ff70e477c0a2d2cf2945bd93eae3a
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoY0:ZzFbxmLPWQMOtEvwDpj38lD/cMAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 488020baf9567c636dcae5c1b08e4ae6_cryptolocker_JC.exe
Files
-
488020baf9567c636dcae5c1b08e4ae6_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ