Static task
static1
Behavioral task
behavioral1
Sample
99d3ab2bfa0f9ca5caa54a99dbc5d049_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
99d3ab2bfa0f9ca5caa54a99dbc5d049_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
99d3ab2bfa0f9ca5caa54a99dbc5d049_cryptolocker_JC.exe
-
Size
73KB
-
MD5
99d3ab2bfa0f9ca5caa54a99dbc5d049
-
SHA1
61a7b99b7b1c9504614f693aabfcc2df4e526052
-
SHA256
cbaf7f668a92544d85d9618efc025610ec4ec5fa752a9a65c90893c685e755e2
-
SHA512
458db7d0ea500b344ea8bbdc30ebc34d2f98a32323aa906f4382241910109ae5cf3b09f31f2c98a2d7d733017d1ec67c25acbef885fec1b679f5997185fc08da
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIR+nD:ZVxkGOtEvwDpjcNB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99d3ab2bfa0f9ca5caa54a99dbc5d049_cryptolocker_JC.exe
Files
-
99d3ab2bfa0f9ca5caa54a99dbc5d049_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ