Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_235c7b91ea6dac6e858998d08439b793_cryptolocker_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_235c7b91ea6dac6e858998d08439b793_cryptolocker_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_235c7b91ea6dac6e858998d08439b793_cryptolocker_JC.exe
-
Size
70KB
-
MD5
235c7b91ea6dac6e858998d08439b793
-
SHA1
16c04553d524ce7e976e9ea445fc9023881fd85c
-
SHA256
fdfe8a36d782bf64b12e80c69f4bbd297e3af705702cc3d59eaa259bc08c2ee9
-
SHA512
451d1666487b7faff180f14af2ef6f86bb6260ceac68c1064f3a7a088d1e010a40f2445bebf6b03099261422565a452f2815ac92c7efd9514aa5627f79d06c98
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KE:ZVxkGOtEvwDpjcaj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_235c7b91ea6dac6e858998d08439b793_cryptolocker_JC.exe
Files
-
2023-08-26_235c7b91ea6dac6e858998d08439b793_cryptolocker_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ