Static task
static1
Behavioral task
behavioral1
Sample
79e071342362c02ad2e7e75ad7683ba2_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
79e071342362c02ad2e7e75ad7683ba2_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
79e071342362c02ad2e7e75ad7683ba2_cryptolocker_JC.exe
-
Size
143KB
-
MD5
79e071342362c02ad2e7e75ad7683ba2
-
SHA1
93390968daaacca4d6123a9a0f338d59aaf3d160
-
SHA256
727646978000c018028d02e147ce9f4809577ea387c60df30b653455c4d99458
-
SHA512
b924521d734965532a63fb4d23504c350de308575f90177b81d428707d85ca1ad2a8c0dd97bfd1e760b93154c3afa1cd33bafbf7afd8df871cc875196a83d206
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPF8:V6a+pOtEvwDpjt22o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79e071342362c02ad2e7e75ad7683ba2_cryptolocker_JC.exe
Files
-
79e071342362c02ad2e7e75ad7683ba2_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ