Static task
static1
Behavioral task
behavioral1
Sample
881dacbd15e3824d52ee53d21c5968cb_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
881dacbd15e3824d52ee53d21c5968cb_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
881dacbd15e3824d52ee53d21c5968cb_cryptolocker_JC.exe
-
Size
73KB
-
MD5
881dacbd15e3824d52ee53d21c5968cb
-
SHA1
a6c1a3bc65faee79824537f0f786e07dc96400d5
-
SHA256
8ca6948eb53e65201c65f4a1624834671e3da702918f1f75e866a05d7d2184e4
-
SHA512
1103fd31e544af786edb41d87c0cfe21dab9d24f622b6564e885e0b3172bfff7243504f51254b1b08073d7a2106a8de275a21d0183084ff12995e98763543fe9
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIR+D:ZVxkGOtEvwDpjcNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 881dacbd15e3824d52ee53d21c5968cb_cryptolocker_JC.exe
Files
-
881dacbd15e3824d52ee53d21c5968cb_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ