Behavioral task
behavioral1
Sample
2024-01-06_ccfc379f2b1b4bac9545580faa1a9389_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-06_ccfc379f2b1b4bac9545580faa1a9389_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-06_ccfc379f2b1b4bac9545580faa1a9389_cryptolocker
-
Size
87KB
-
MD5
ccfc379f2b1b4bac9545580faa1a9389
-
SHA1
6acf66c200974a6b4c4e8057010b4e98b8bfa4ca
-
SHA256
5c60380c7f40e6861af0be145f7ef7e76c142e2a4e1350045d5db43f06e245dc
-
SHA512
2f3d8b73101557673a9dcacb0ab97962a8cc551553ddcd4c3a1b977b0c5d0c98258265dfee55a03c0f1266c25a58f0d217af47ae3e5369d23e14fa9dd2f7cc61
-
SSDEEP
1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRMy8z:zCsanOtEvwDpjn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-06_ccfc379f2b1b4bac9545580faa1a9389_cryptolocker
Files
-
2024-01-06_ccfc379f2b1b4bac9545580faa1a9389_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE