Static task
static1
Behavioral task
behavioral1
Sample
2024-01-06_12026c8439da5f07516f254b004c721c_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-06_12026c8439da5f07516f254b004c721c_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-06_12026c8439da5f07516f254b004c721c_cryptolocker
-
Size
120KB
-
MD5
12026c8439da5f07516f254b004c721c
-
SHA1
63b586bd31be08db788aca81b60c01d37dab438d
-
SHA256
4a84136876313c8ccadae085a5dc6be75affb2c444f0a9b44943513c7aaf0dd0
-
SHA512
f33dfa27593a47c319d59222f0e019a98faef44b97e64698143f30f6833fe8ec6f3a6951df2d16b5d344cae92b03021287c04672b3384fb0ec2d8db17a205934
-
SSDEEP
768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTZ6:gUj+AIMOtEvwDpjNbwQEIPlemUhYp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-06_12026c8439da5f07516f254b004c721c_cryptolocker
Files
-
2024-01-06_12026c8439da5f07516f254b004c721c_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE