Behavioral task
behavioral1
Sample
342456c8bbfae88db61dd60bd389f0fc_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
342456c8bbfae88db61dd60bd389f0fc_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
342456c8bbfae88db61dd60bd389f0fc_cryptolocker_JC.exe
-
Size
73KB
-
MD5
342456c8bbfae88db61dd60bd389f0fc
-
SHA1
9710c237575e229318f490b0c8ae299197a50d7e
-
SHA256
05272fd5aca1fa13c80c97e58282dbebe3201dc97c058d001f6bb0e8d48a340b
-
SHA512
30abffee5107836172185c94bae2734765692d3f90209b2c0aaf6579a3446c44e309e819b9d226cfc05849bc35be8c47cbb94d8f7ba93e5d0b1b015c4fc9e970
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7pBlqrr1HBJooSeKzu1adyBR:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 342456c8bbfae88db61dd60bd389f0fc_cryptolocker_JC.exe
Files
-
342456c8bbfae88db61dd60bd389f0fc_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE