Behavioral task
behavioral1
Sample
2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker
-
Size
31KB
-
MD5
1509c8b0d36cb88c928b303053f3bfd2
-
SHA1
18ca2dbf299853522d1e8824f6b92030b4baa266
-
SHA256
043ae25272d703c92ddd18e33fd74f10d144b90690368041e2af0d3311c799e3
-
SHA512
47fc86245f3c46d970861dbc5387ce9f88997c0ca995d9370e6fb94bdeec1ee0f62d38ceaa0c43a8dd0f63c25e105e0ae37ec974227ac7ab1447ac8e29c4eda1
-
SSDEEP
768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5a1:qUmnpomddpMOtEvwDpjjaYa1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker unpack001/out.upx
Files
-
2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ