Static task
static1
Behavioral task
behavioral1
Sample
49257a490aeb80e039e1b2cf29b496d8_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
49257a490aeb80e039e1b2cf29b496d8_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
49257a490aeb80e039e1b2cf29b496d8_cryptolocker_JC.exe
-
Size
47KB
-
MD5
49257a490aeb80e039e1b2cf29b496d8
-
SHA1
652b6374267c2cc12f8bb4df983061b3b39c27b5
-
SHA256
6a74098242caff0e420b7e33ce34aa519f27b5cf4d187f1d724873bbd5baef87
-
SHA512
61ba9e1c6e9315af8b12b156e7daa0f5cac336f22286e76c9d7c100517a4345c694c74a46ea8af30d7639b3f1be78161b9c6d4b5976bf4dee5087543bc4fb461
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXcTDpJ:V6QFElP6n+gMQMOtEvwDpjeJQ7poja/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49257a490aeb80e039e1b2cf29b496d8_cryptolocker_JC.exe
Files
-
49257a490aeb80e039e1b2cf29b496d8_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ