Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_28dc9d9447f20fc9114bc76412609040_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_28dc9d9447f20fc9114bc76412609040_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-10_28dc9d9447f20fc9114bc76412609040_cryptolocker
-
Size
56KB
-
MD5
28dc9d9447f20fc9114bc76412609040
-
SHA1
0aba96c15123374870a6be6edfbf4ee001924b0c
-
SHA256
5aebe070d0937107685c2e305eb8723901aa877b8c4d84f1e094a18ddd954ae9
-
SHA512
34265272430cf28615f61765e2be14172362f40bc56be4ba2199165c5c22aea8ee9039a58b348d82a43daae2ee9633d2d1b864498a631ed5c7962ca19a3f2425
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb614B:BbdDmjr+OtEvwDpjM+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-10_28dc9d9447f20fc9114bc76412609040_cryptolocker
Files
-
2024-01-10_28dc9d9447f20fc9114bc76412609040_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE