Behavioral task
behavioral1
Sample
2024-01-06_1cca744baca70c36ce6aff4d5eee0586_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-06_1cca744baca70c36ce6aff4d5eee0586_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-06_1cca744baca70c36ce6aff4d5eee0586_cryptolocker
-
Size
54KB
-
MD5
1cca744baca70c36ce6aff4d5eee0586
-
SHA1
328ac3176cd73a62683816d8d4f8bbf94af0f339
-
SHA256
cc8d65de2b3ce0adabe3e6fa4f11dd004dea36c948d9a8b0fc5737d07944c526
-
SHA512
540d7e0e9e2f0e6c0c1f487f8e923a1cf6b1f6628171a3c1b40f5151ee8600c13a1693504d368ef2b58e597dfcf2a3ef668448397180aed8117ec4f6791ebf43
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFeV0ZOfcpX:zj+soPSMOtEvwDpj4yz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-06_1cca744baca70c36ce6aff4d5eee0586_cryptolocker
Files
-
2024-01-06_1cca744baca70c36ce6aff4d5eee0586_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE