Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_d3f4f5a7f902ddf9b8004995e427f505_cryptolocker_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_d3f4f5a7f902ddf9b8004995e427f505_cryptolocker_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_d3f4f5a7f902ddf9b8004995e427f505_cryptolocker_JC.exe
-
Size
33KB
-
MD5
d3f4f5a7f902ddf9b8004995e427f505
-
SHA1
00a0441bf83e16cacacc9024e89e29835f11d861
-
SHA256
2c589f8fa4572dc487bd303609b5105710a9455186281430c1a4429a1be94450
-
SHA512
081c79e9a35e3270a524eba4fd18bfc17637003fcc5431c63b926ce601a3e593c0e0c15376ac60c2ffb2221d26d553aa240914187d52a9a383598e33882bbb96
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeo:ZzFbxmLPWQMOtEvwDpjLeo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_d3f4f5a7f902ddf9b8004995e427f505_cryptolocker_JC.exe
Files
-
2023-08-25_d3f4f5a7f902ddf9b8004995e427f505_cryptolocker_JC.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ