Static task
static1
Behavioral task
behavioral1
Sample
49f109c622b24739d2c49790a5b50179_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
49f109c622b24739d2c49790a5b50179_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
49f109c622b24739d2c49790a5b50179_cryptolocker_JC.exe
-
Size
33KB
-
MD5
49f109c622b24739d2c49790a5b50179
-
SHA1
cf480698a331eb8afc3a7ff5502db6dc463522a0
-
SHA256
18b4bd71ce345a8430f3a4be36dd14ad72d62d3ed668a41b2ca4106ae377c605
-
SHA512
08cc5ebf4cac22964c30bf9c4f0e004ea829f279b7649b269fe0b248b72e6756726997d7580ec0cdee1e40c64a3833a29d9eaf889c3b5ad62b5e3b28f9c8ed8f
-
SSDEEP
768:q0ZziOWwULueOSdE8tOOtEvwDpjej4AYsqSh+DETkev:q0zizzOSxMOtEvwDpjC39+D+5v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f109c622b24739d2c49790a5b50179_cryptolocker_JC.exe
Files
-
49f109c622b24739d2c49790a5b50179_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE