Behavioral task
behavioral1
Sample
2024-09-06_b88d8b507ab74f5ab5d70636e6e3b81e_cryptolocker.exe
Resource
win7-20240903-en
General
-
Target
2024-09-06_b88d8b507ab74f5ab5d70636e6e3b81e_cryptolocker
-
Size
53KB
-
MD5
b88d8b507ab74f5ab5d70636e6e3b81e
-
SHA1
653a3b17af77eb17025cc9449e5a4728d5821d01
-
SHA256
85770f994098ddeefc5d1431c22aef6322e4c44c259451b6c697ab9c4f548635
-
SHA512
bae26b78bcd434a3aa2cafd254c2ab3b440deb40ab9e1b2fb680d2f354a3da050d3f47085df5cec295911453379070e868f440733f36091e8cd2ce3e905172f6
-
SSDEEP
768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtONQ:bODOw9acifAoc+v0Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-06_b88d8b507ab74f5ab5d70636e6e3b81e_cryptolocker
Files
-
2024-09-06_b88d8b507ab74f5ab5d70636e6e3b81e_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE