Static task
static1
Behavioral task
behavioral1
Sample
745dff2ae90de6fc592da7c7030d74e2_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
745dff2ae90de6fc592da7c7030d74e2_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
745dff2ae90de6fc592da7c7030d74e2_cryptolocker_JC.exe
-
Size
29KB
-
MD5
745dff2ae90de6fc592da7c7030d74e2
-
SHA1
87df35c18e858d170ecab7202790e822ab1808f4
-
SHA256
e987c75651d8542142694d6dafdffad4b3f7766a3ed8b066957156e5cf38d7cf
-
SHA512
9e49b432eec5580750b7e2f6a6fbb14c9c17b7c8c5582b3f639dce28aa13109b301fc03d5862a438b5ca1f8a0498be6c4ee47316c59b1cc6139edca2ba21e15d
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2T:btB9g/WItCSsAGjX7r3T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 745dff2ae90de6fc592da7c7030d74e2_cryptolocker_JC.exe
Files
-
745dff2ae90de6fc592da7c7030d74e2_cryptolocker_JC.exe.exe windows x86
a2bfa209044e11b72a41f731968fdff2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA
gdi32
CreateFontIndirectA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ