Static task
static1
Behavioral task
behavioral1
Sample
5e1e46166a5b9c6309a2d71f2396f228_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5e1e46166a5b9c6309a2d71f2396f228_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
5e1e46166a5b9c6309a2d71f2396f228_cryptolocker_JC.exe
-
Size
73KB
-
MD5
5e1e46166a5b9c6309a2d71f2396f228
-
SHA1
85557f1a6818c062cc67d1aebcb9b9edd6e6c467
-
SHA256
3b6e3d26775290ce89e1daf5c8794af427f4ba14fe674cf38c618a6c2d6e2d49
-
SHA512
6d095e147d641b42e7092f9392483704361326f444ba5d558cc4468210ed1c742a208fdca378b22c3842dde8bd35867d19219173817f1a1a336387e8388a27fd
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIR+r:ZVxkGOtEvwDpjcNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e1e46166a5b9c6309a2d71f2396f228_cryptolocker_JC.exe
Files
-
5e1e46166a5b9c6309a2d71f2396f228_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ