Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-06_0c8793c80c0e0c88e84c133f91146a32_cryptolocker_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-06_0c8793c80c0e0c88e84c133f91146a32_cryptolocker_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2023-09-06_0c8793c80c0e0c88e84c133f91146a32_cryptolocker_JC.exe
-
Size
59KB
-
MD5
0c8793c80c0e0c88e84c133f91146a32
-
SHA1
e920cf766f39b5575376d789252fade2eb953371
-
SHA256
0a31bd876aa92ceb8bcfd6d4e605df8e5c9aeb5b015ff5e3d9b3964c089b355e
-
SHA512
a08be83a42e2a80dbb95c2a6552e70408b693e431b4bef194d1c1ca9d6b8f45b9c95169365213cda3402482dcaaa927b1a3615bb8363aa0a101b1d6ed609b672
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJT/EH:ZVxkGOtEvwDpjcO8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2023-09-06_0c8793c80c0e0c88e84c133f91146a32_cryptolocker_JC.exe
Files
-
NEAS.2023-09-06_0c8793c80c0e0c88e84c133f91146a32_cryptolocker_JC.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ