Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe
-
Size
44KB
-
MD5
4d5dbc57da80d81d6795dc859029a091
-
SHA1
878e1ff5b6777ab2ccd6678d60f3f9ae9db3d6f3
-
SHA256
b51a8db7a42c2c196d0bcfb4edc891066c6d74af56f25f17201f821c5a43c962
-
SHA512
6d941069d7f8961bab8e0863a42ab113db5baa9f0cd70b8e62468e54fb740ad1cfc6385070f0f8bf1f53aa294c658a0aff1d08173ef25281c686f4eb008a1da7
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldv:xj+VGMOtEvwDpjk/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe
Files
-
NEAS.2023-09-06_4d5dbc57da80d81d6795dc859029a091_cryptolocker_JC.exe.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE