Static task
static1
Behavioral task
behavioral1
Sample
65088aa74c830c81170d52ca1cfd646b_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
65088aa74c830c81170d52ca1cfd646b_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
65088aa74c830c81170d52ca1cfd646b_cryptolocker_JC.exe
-
Size
45KB
-
MD5
65088aa74c830c81170d52ca1cfd646b
-
SHA1
1723f356c75848a6552f9b3d9768ccd7cbfc65ee
-
SHA256
9accd21b2e35c8851238b3c05371f5493077c0c6d364609e86d02d9cdfaed4f0
-
SHA512
35b6a48029374521d366353d9ef7898d8a773420d32dd319b0f81c19459b3c88d8fa6c72fd9bdf6b3458886cedbdf404553c2335e32ceab1f5874fe3505054eb
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05RKb6F51:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKbY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65088aa74c830c81170d52ca1cfd646b_cryptolocker_JC.exe
Files
-
65088aa74c830c81170d52ca1cfd646b_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE