Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_5d60a8eba146f2cee337e4ac346df92a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-09_5d60a8eba146f2cee337e4ac346df92a_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-09_5d60a8eba146f2cee337e4ac346df92a_cryptolocker
-
Size
74KB
-
MD5
5d60a8eba146f2cee337e4ac346df92a
-
SHA1
b4efe4c6fa5f8ee8d3b8f9c88d047be167428c7d
-
SHA256
2bdba5f377cc7b0c6204f0e88f752324364ac0359d26438b27391d7475a9be06
-
SHA512
71f079f09345bd0a9696122d9d565ccb842da8e6eea597878600cbe6d59def5971dfb90fb76ced98947f613e649d0d1a402b375178610552687dfa7ec3a4982d
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KD:ZVxkGOtEvwDpjcas
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-09_5d60a8eba146f2cee337e4ac346df92a_cryptolocker
Files
-
2024-01-09_5d60a8eba146f2cee337e4ac346df92a_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ