Static task
static1
Behavioral task
behavioral1
Sample
2024-01-03_512c44841812dc94ac40fe3820013db2_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-03_512c44841812dc94ac40fe3820013db2_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-03_512c44841812dc94ac40fe3820013db2_cryptolocker
-
Size
61KB
-
MD5
512c44841812dc94ac40fe3820013db2
-
SHA1
52457eb66e8da469ace9d22a6dff1dbe74528c04
-
SHA256
915c7f4c250059f9bee86ffe310d143aab2563863550f849d41044214f1ed008
-
SHA512
58eff33b3fecc7fd5f8c7dffd9f96834990f6785dc5a4335175126ae714d0b61ac5b3d3bb829e3a67ab207bbb4dfe3e7b33480dd0a96a120583a3e22cf487b7e
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnz10Lhb:ZzFbxmLPWQMOtEvwDpj386Sj/RsB0Cw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-03_512c44841812dc94ac40fe3820013db2_cryptolocker
Files
-
2024-01-03_512c44841812dc94ac40fe3820013db2_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ