Behavioral task
behavioral1
Sample
48f467dfc28e25f3652c19f99be6a048_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
48f467dfc28e25f3652c19f99be6a048_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
48f467dfc28e25f3652c19f99be6a048_cryptolocker_JC.exe
-
Size
60KB
-
MD5
48f467dfc28e25f3652c19f99be6a048
-
SHA1
a48ec251aed65d0626bfcf6eb0982b2ef3c3d6f1
-
SHA256
2a1412b4cd5a1547efadcc9aa9179de54193e7fd3a5dea8622856ad114dfbdaa
-
SHA512
fc13055fade039943d531bef0b4e0560ef91d7db9e373a156bd86137207a801261314273d5d470d8ab3dd3460caec86ecc5b45f64d73dc96eefcec035709a00a
-
SSDEEP
768:qgmnjO6LsoEEeegiZPvEhHSG+g0dum/kLyMro2GtOOtEvwDpj:qgmnK6QFElP6n+g0ImddpMOtEvwDpj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48f467dfc28e25f3652c19f99be6a048_cryptolocker_JC.exe
Files
-
48f467dfc28e25f3652c19f99be6a048_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE