Static task
static1
Behavioral task
behavioral1
Sample
985da701c0b68743cfd34afe0afc1525_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
985da701c0b68743cfd34afe0afc1525_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
985da701c0b68743cfd34afe0afc1525_cryptolocker_JC.exe
-
Size
28KB
-
MD5
985da701c0b68743cfd34afe0afc1525
-
SHA1
87f63425149679f08ec487d05f5bdb7f3407b415
-
SHA256
0f1aadff18f5215aba331b5332ad7f62dce616deab6f7f4cdff61afec328782f
-
SHA512
3accc0ec6cdf5ebd19fe8ad91e343e7b43b309622485159c0746fdd3f993d7184045c15bbf1207164889bd1205757e9e458edcb1145d2192a3c55807a68db3ac
-
SSDEEP
384:qxOZzyjOnqGAs+8ULueO4NdE8tOOtEvwDpjqIGRYK1sGe0ATv1zq:q0ZziOWwULueOSdE8tOOtEvwDpjeW0Wq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 985da701c0b68743cfd34afe0afc1525_cryptolocker_JC.exe
Files
-
985da701c0b68743cfd34afe0afc1525_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE