Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_c3444a062e78c23bca783ff9f4f6e9e7_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-09_c3444a062e78c23bca783ff9f4f6e9e7_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-09_c3444a062e78c23bca783ff9f4f6e9e7_cryptolocker
-
Size
45KB
-
MD5
c3444a062e78c23bca783ff9f4f6e9e7
-
SHA1
1fa19476ab4bfcd0953ab22b6fa09fab8746a751
-
SHA256
fb85dce1a70d780c4e38dd847d436cd5475da3d22c106d4f78587af23300c4fc
-
SHA512
4e038486c38d2b4a95bbab58d9ff4612d4d317d7c295c7d52acb1e665766d254ba1a0ae4a7df23ff0eeb783d286a5583218c31bb024ba70c7ff9d0553f926bb2
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsh:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ1f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-09_c3444a062e78c23bca783ff9f4f6e9e7_cryptolocker
Files
-
2024-01-09_c3444a062e78c23bca783ff9f4f6e9e7_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ