Static task
static1
Behavioral task
behavioral1
Sample
589163e68b06e9de7125af5882b83a65_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
589163e68b06e9de7125af5882b83a65_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
589163e68b06e9de7125af5882b83a65_cryptolocker_JC.exe
-
Size
50KB
-
MD5
589163e68b06e9de7125af5882b83a65
-
SHA1
b128dea28c487330ed80b04f1e44fb8af76eafef
-
SHA256
828d6436fcfeddf23ba0d0e46a0ca112c41590cd5e14dafbb00589adba198b55
-
SHA512
22b797a9bd7c1f2a06b1d5ab93ff89c472bde18390b96bda5bee4cf172c4bbd901f2fcc2da842d19f2c53283b2b8dca9f6ec17d83c609019a7fd3dfcc9d40809
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ9Yv0e:xj+VGMOtEvwDpjubfe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 589163e68b06e9de7125af5882b83a65_cryptolocker_JC.exe
Files
-
589163e68b06e9de7125af5882b83a65_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE