Static task
static1
Behavioral task
behavioral1
Sample
916b5acb8d7d55e45fa46f732902d29c_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
916b5acb8d7d55e45fa46f732902d29c_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
916b5acb8d7d55e45fa46f732902d29c_cryptolocker_JC.exe
-
Size
65KB
-
MD5
916b5acb8d7d55e45fa46f732902d29c
-
SHA1
0b5181e950ac50545dadbc456e383f4794b9ff17
-
SHA256
64c63e216b3977f6f52a3af2443f5721540347850a3d696db7b702916c0c3075
-
SHA512
6cf14e5ed1e32610486775596b30d642a7bbdf56a8f8a85eca3276985cb0ea7b212031e39d8cb42bd0032cc8aabb6455969a4c24a2139afd860aea7d1a05cb91
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVpRSzG:V6a+pOtEvwDpjv9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 916b5acb8d7d55e45fa46f732902d29c_cryptolocker_JC.exe
Files
-
916b5acb8d7d55e45fa46f732902d29c_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ