Static task
static1
Behavioral task
behavioral1
Sample
2024-08-26_3d453c67872fc3ce2d9e3e268896833a_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-26_3d453c67872fc3ce2d9e3e268896833a_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-26_3d453c67872fc3ce2d9e3e268896833a_cryptolocker
-
Size
43KB
-
MD5
3d453c67872fc3ce2d9e3e268896833a
-
SHA1
b7fe3cd56d7979128d188dccb47a4a5717c1a168
-
SHA256
428097ee604f82faa9736947e60ad34fb71da396b8da6f374c8907b9969300c9
-
SHA512
f86aaf4b65605ade8312ad5efd280dfbd5f31b92e322c06ddfff9c949c6e32c78a489f648a19dac259729acf8c763f9383b349efbfb8b503f1a0c0059b104cb8
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDkh3:ZzFbxmLPWQMOtEvwDpjLeJAsKco3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-26_3d453c67872fc3ce2d9e3e268896833a_cryptolocker
Files
-
2024-08-26_3d453c67872fc3ce2d9e3e268896833a_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ