Static task
static1
Behavioral task
behavioral1
Sample
8b417287125cb415832ed160441f3dec_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8b417287125cb415832ed160441f3dec_cryptolocker_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
8b417287125cb415832ed160441f3dec_cryptolocker_JC.exe
-
Size
41KB
-
MD5
8b417287125cb415832ed160441f3dec
-
SHA1
c731e10a88d6f1009e729f7d4ef97bfd825e0623
-
SHA256
fd56b99997e179273a4ff4336fbf529124dce243812867918b7ab186729e317e
-
SHA512
512270b2afd7e1294da24a2b5caf338471e08cac6ad2d48b91e5b0faddc6e7ced59ec2146df086b73976dd968a316284aa8f24fa1aab66b15f8e88d095fe35c0
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG055:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b417287125cb415832ed160441f3dec_cryptolocker_JC.exe
Files
-
8b417287125cb415832ed160441f3dec_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE