Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_440d0c2b7962a33502822c41e7efba80_cryptolocker_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_440d0c2b7962a33502822c41e7efba80_cryptolocker_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-27_440d0c2b7962a33502822c41e7efba80_cryptolocker_JC.exe
-
Size
33KB
-
MD5
440d0c2b7962a33502822c41e7efba80
-
SHA1
4951ec56d19078b9500e445fdbb7dd2396ed56d0
-
SHA256
fe9f8ebd0a8c08d9377253e6a3567d9e6b39afef5524f4f9c61c159684557428
-
SHA512
3fa624546c71cf621f367e4d9bad2cafc4601b63e397b0ed2269b5a54ffab6cec8f8a21e784fde0b9854dc7ad5f59c33bd566f7e43f807c7dd6fba6e92674167
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeY:ZzFbxmLPWQMOtEvwDpjLeY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-27_440d0c2b7962a33502822c41e7efba80_cryptolocker_JC.exe
Files
-
2023-08-27_440d0c2b7962a33502822c41e7efba80_cryptolocker_JC.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ