Static task
static1
Behavioral task
behavioral1
Sample
67f43d1299ce67b706cab0bcd3bcba64_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
67f43d1299ce67b706cab0bcd3bcba64_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
67f43d1299ce67b706cab0bcd3bcba64_cryptolocker_JC.exe
-
Size
50KB
-
MD5
67f43d1299ce67b706cab0bcd3bcba64
-
SHA1
cf1733541778f9a56ec16b3ccfc400450309f794
-
SHA256
7434d70b2e55191ee6245ba8f2c1975b3b5f6037f9ecbda3c65b4d51d0169cf8
-
SHA512
16d280d512e1e9a31e5846357d55112217101c4a531097bd13dd8b3a67cdd8ff10499a0bbd1ca904c2014396fe42d84ea01576585f029a3b81d223e51e27eeeb
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqSdRI:ZzFbxmLPWQMOtEvwDpj38lD/cMAF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67f43d1299ce67b706cab0bcd3bcba64_cryptolocker_JC.exe
Files
-
67f43d1299ce67b706cab0bcd3bcba64_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ