Static task
static1
Behavioral task
behavioral1
Sample
6aac60f80e70e1ff3b45ebeaf31d2780_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6aac60f80e70e1ff3b45ebeaf31d2780_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6aac60f80e70e1ff3b45ebeaf31d2780_cryptolocker_JC.exe
-
Size
47KB
-
MD5
6aac60f80e70e1ff3b45ebeaf31d2780
-
SHA1
a8d92447cf18ea153c857ef0b42211a560fb02d4
-
SHA256
65feffcd64c74e419d3e7e38e2a16f0b21ad6faa5400343f61d394e7f073c9ce
-
SHA512
6d6ae4744821eced920163ad58f6b462e22a94d034ff322d99f9aa58bdb1af26c10f4c79fd281c494f501c24f486aa076b02783ccdd1fde7b26f11e35ae3e412
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05RKb6Fdy:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKbH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aac60f80e70e1ff3b45ebeaf31d2780_cryptolocker_JC.exe
Files
-
6aac60f80e70e1ff3b45ebeaf31d2780_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE