Static task
static1
Behavioral task
behavioral1
Sample
f8941f3d286ac04f6f65949b49b4c46a_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f8941f3d286ac04f6f65949b49b4c46a_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
f8941f3d286ac04f6f65949b49b4c46a_cryptolocker_JC.exe
-
Size
53KB
-
MD5
f8941f3d286ac04f6f65949b49b4c46a
-
SHA1
29303ed8f996add4d8779965c3fcf80fabee4f7c
-
SHA256
189de5878adff32dd443809fb87bade6193ed6a8f7e11d3d393a5b4ed0bd37ac
-
SHA512
8a2e419526a65ec6e9b41e2f082da8bbb14dc8d54cd45dd5d60fcbeffa2aa473298d997844e172244d2e2753e61352819bb95b2faae9c0edbf4a0ba4c3663a87
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8lB4dCOBy/cMFqeoaUz:ZzFbxmLPWQMOtEvwDpj38lD/cMAzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8941f3d286ac04f6f65949b49b4c46a_cryptolocker_JC.exe
Files
-
f8941f3d286ac04f6f65949b49b4c46a_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ