Static task
static1
Behavioral task
behavioral1
Sample
8daf605c05d202d91a0bc25f6f871943_cryptolocker_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8daf605c05d202d91a0bc25f6f871943_cryptolocker_JC.exe
Resource
win10v2004-20230824-en
General
-
Target
8daf605c05d202d91a0bc25f6f871943_cryptolocker_JC.exe
-
Size
60KB
-
MD5
8daf605c05d202d91a0bc25f6f871943
-
SHA1
2f7b0df5cff8855e62c5c80d49be86de857f3023
-
SHA256
8c38194856a4baeda364b6f711b6d3169668d9d859d0df7694da4270ba017e9f
-
SHA512
9f99d6de26e07b0d073fb39273676e406cee241f25a215c9eb511e12ba1bbee9f8519ee0cd6e015adffc09cfc5ee7185c7d9b046946ead199744c1df1ca94404
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcu7:ZVxkGOtEvwDpjcah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8daf605c05d202d91a0bc25f6f871943_cryptolocker_JC.exe
Files
-
8daf605c05d202d91a0bc25f6f871943_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ