Behavioral task
behavioral1
Sample
2024-09-11_fd8cc82f34c780c1b614eb9ca29f224f_cryptolocker.exe
Resource
win7-20240903-en
General
-
Target
2024-09-11_fd8cc82f34c780c1b614eb9ca29f224f_cryptolocker
-
Size
69KB
-
MD5
fd8cc82f34c780c1b614eb9ca29f224f
-
SHA1
f5d6e3150d6c83289e2284965c444e8abbb8fd44
-
SHA256
208bb91a2d9df43aaa57fe4fcc04cf9e8f47f1623f71b36c1a5dcc2b09af852c
-
SHA512
738651e9cd49391125bdac3d60dfca44095d770552b9601615788eefbd83a4a0a35ced0426d97e332271b54961ba5e7660f2eb9149c1efec9c0e78e6b5116bc7
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRh:1nK6a+qdOOtEvwDpjs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-11_fd8cc82f34c780c1b614eb9ca29f224f_cryptolocker
Files
-
2024-09-11_fd8cc82f34c780c1b614eb9ca29f224f_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE