Static task
static1
Behavioral task
behavioral1
Sample
59a9f70ee1c914a75fdf5182da8e3c2a_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
59a9f70ee1c914a75fdf5182da8e3c2a_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
59a9f70ee1c914a75fdf5182da8e3c2a_cryptolocker_JC.exe
-
Size
53KB
-
MD5
59a9f70ee1c914a75fdf5182da8e3c2a
-
SHA1
c1a84df680ea49056013f18558c55f1b529fddd8
-
SHA256
755e520cee9b1c772ec1370b0df57378f922c394380b63bb12ce3c9ba2870e4d
-
SHA512
878815558869f9f93cd9d955febbf5330efd9b8c10ab901ecf3eda7951ac94a1a0165109b76d230dc51d7f83912bfd98641258f0e639a781f1d8fd72b8ea9f76
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I54o8U:6j+1NMOtEvwDpjr8ox8CZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a9f70ee1c914a75fdf5182da8e3c2a_cryptolocker_JC.exe
Files
-
59a9f70ee1c914a75fdf5182da8e3c2a_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE