Static task
static1
Behavioral task
behavioral1
Sample
6ea211c841e8816cc3a9f6087594f786_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6ea211c841e8816cc3a9f6087594f786_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6ea211c841e8816cc3a9f6087594f786_cryptolocker_JC.exe
-
Size
28KB
-
MD5
6ea211c841e8816cc3a9f6087594f786
-
SHA1
208d2d69aab43173f51072cb7425f09ad1e4d99a
-
SHA256
9825ddd82168196bf9644016e1f100ffea490325152c8b56f4b8cf6f38e66cf3
-
SHA512
7ad9b4c4afb92a4a6f7ef97d53443466fde4bd20b9d34bf0e2e72db3ac74e3508010d7d2555edef2927d49ff5c1c15ad67f859765bec2307a80e0a0ba551d893
-
SSDEEP
384:qxOZzyjOnqGAs+8ULueO4NdE8tOOtEvwDpjqIGRYK1sGe0ATvVU:q0ZziOWwULueOSdE8tOOtEvwDpjeW00U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ea211c841e8816cc3a9f6087594f786_cryptolocker_JC.exe
Files
-
6ea211c841e8816cc3a9f6087594f786_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE