Static task
static1
Behavioral task
behavioral1
Sample
4a950d8454e350d949c1fb528adc2ae8_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4a950d8454e350d949c1fb528adc2ae8_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
4a950d8454e350d949c1fb528adc2ae8_cryptolocker_JC.exe
-
Size
74KB
-
MD5
4a950d8454e350d949c1fb528adc2ae8
-
SHA1
fbefb2c0e98dbe8023e8c75bbd9440a3aa292205
-
SHA256
9b1e52fb3ffe1cf82289b98fe228b1f5cd18400cd1a49c54e9a138a81855a55f
-
SHA512
73e32898abc0701bb8ae8f845e703eb678fe0e0eec965fcca461bb1f604807d5f510d5d13092455298160d4646fcab63b52e307b82e870b1fce939aedaeeab8f
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIRhpHP:ZVxkGOtEvwDpjcNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a950d8454e350d949c1fb528adc2ae8_cryptolocker_JC.exe
Files
-
4a950d8454e350d949c1fb528adc2ae8_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ