Static task
static1
Behavioral task
behavioral1
Sample
71e87ab293aa739c8bb63082ff446598_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
71e87ab293aa739c8bb63082ff446598_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
71e87ab293aa739c8bb63082ff446598_cryptolocker_JC.exe
-
Size
33KB
-
MD5
71e87ab293aa739c8bb63082ff446598
-
SHA1
285849a53cf6115ec0d7ec402eec445711add16c
-
SHA256
72a1b541aadcc3aaf538fa2b5dba1a27f0c41fb1af5cd8c0ab36c20c1ececbd0
-
SHA512
7b57ae4731f9c3ac4e88cb62a550824169659eb44db0e63fccc0c70440bcb0b6c36d3b555ef85810d6e1a26d5836b62aa7b1460fb48a012fbc99c612512e3153
-
SSDEEP
768:q0ZziOWwULueOSdE8tOOtEvwDpjej4AYsqSh+DETkeu:q0zizzOSxMOtEvwDpjC39+D+5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71e87ab293aa739c8bb63082ff446598_cryptolocker_JC.exe
Files
-
71e87ab293aa739c8bb63082ff446598_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE