Static task
static1
Behavioral task
behavioral1
Sample
835775f4ab35316dde5e3490de345e1a_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
835775f4ab35316dde5e3490de345e1a_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
835775f4ab35316dde5e3490de345e1a_cryptolocker_JC.exe
-
Size
65KB
-
MD5
835775f4ab35316dde5e3490de345e1a
-
SHA1
4b00d421a1ae55553a494c8ce2647bc7f8a1a983
-
SHA256
019a59a046283351549c9bb8f1e7b071d8d284ef27baf06c168700f4953f2d46
-
SHA512
6b14e21dd19ab70df9ba38556b4b74212288a8558f7bc2e3d142fd153cc255f198de3a62f4b4b3640c14f52347050488650de7be6defc3773703cc60ea9b9a70
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36n9QNv:ZVxkGOtEvwDpjcaAg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 835775f4ab35316dde5e3490de345e1a_cryptolocker_JC.exe
Files
-
835775f4ab35316dde5e3490de345e1a_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ