Static task
static1
Behavioral task
behavioral1
Sample
20240521aa3b1cbc6572747621ac70ea1694703acryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20240521aa3b1cbc6572747621ac70ea1694703acryptolocker.exe
Resource
win10v2004-20240426-en
General
-
Target
20240521aa3b1cbc6572747621ac70ea1694703acryptolocker.exe
-
Size
51KB
-
MD5
aa3b1cbc6572747621ac70ea1694703a
-
SHA1
c61ffa4d3ea27d171bc6840c69bb8577db573d4b
-
SHA256
ffcdc8d0e80e464f09febf340138b9c096ef95d3bb92032b3ac1930b61de6402
-
SHA512
fefb9c5c1010fd5884c242163542b39862840c6cc0dd864f29ad1c9e28b5d83252c7223ee32b38e7c1accb254486ec00f9fd8b152adf3299df7f0fd8d5157322
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoccZ:qmbhXDmjr5MOtEvwDpj5cDtKkQZQP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20240521aa3b1cbc6572747621ac70ea1694703acryptolocker.exe
Files
-
20240521aa3b1cbc6572747621ac70ea1694703acryptolocker.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE