Behavioral task
behavioral1
Sample
685a7ecc5fe3ed0de562689ce4337c5c_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
685a7ecc5fe3ed0de562689ce4337c5c_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
685a7ecc5fe3ed0de562689ce4337c5c_cryptolocker_JC.exe
-
Size
64KB
-
MD5
685a7ecc5fe3ed0de562689ce4337c5c
-
SHA1
aef4d6a6153ab74e4d33924384dafc4445aecefc
-
SHA256
909c8aade59086f853e81f5a8544e8a8a528a44f531d559617950e0e5e58f65d
-
SHA512
b49b5aff071d12b97087359e581f66cfa990600d9bf2b96a337feef19f13e3dc301e57601b18799ae9f41732ebdd9271cde20c11112643d72464e460805cb0f0
-
SSDEEP
768:P4mnjO6LsoEEeegiZPvEhHSG+gM4um/kLyMro2GtOOtEvwDpjK:P4mnK6QFElP6n+gMVmddpMOtEvwDpj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 685a7ecc5fe3ed0de562689ce4337c5c_cryptolocker_JC.exe
Files
-
685a7ecc5fe3ed0de562689ce4337c5c_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 4KB - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE