Static task
static1
Behavioral task
behavioral1
Sample
2024-09-08_1c9011f6bc7559e4d4333295bbcc458e_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-08_1c9011f6bc7559e4d4333295bbcc458e_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-08_1c9011f6bc7559e4d4333295bbcc458e_cryptolocker
-
Size
42KB
-
MD5
1c9011f6bc7559e4d4333295bbcc458e
-
SHA1
594d55d8fe682925e7b50e0b6386166dafb6f4fb
-
SHA256
d5a98ab96655e0e03f4c5059054f746e2d0055b8a72d869e57b377d98469283c
-
SHA512
8b81bb2d2c68bd228d35f92d87a055cf5c9cb93efe00c40b69a3b7631201a0a161d6ac0b8fa4dabf7941c269181c56686a57e365c853abb148acd69b94061f79
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7xg:ZzFbxmLPWQMOtEvwDpjLeJAsKcb7S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-08_1c9011f6bc7559e4d4333295bbcc458e_cryptolocker
Files
-
2024-09-08_1c9011f6bc7559e4d4333295bbcc458e_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ