Static task
static1
Behavioral task
behavioral1
Sample
2024-09-12_79caa573ac0af84f31af3ac3fa0178e4_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-12_79caa573ac0af84f31af3ac3fa0178e4_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-12_79caa573ac0af84f31af3ac3fa0178e4_cryptolocker
-
Size
79KB
-
MD5
79caa573ac0af84f31af3ac3fa0178e4
-
SHA1
c1b5ab1a82b24f6b3911c77d711dac8a6f49507d
-
SHA256
40df0337c19f50bd897fbb22b6a8e23bb2f9ca1f38fc9886fb621e8fd1fa3b88
-
SHA512
11207019b9aeefe0ad59eaaed74b9c6561d4aadb2c639f95aa2fee4d2ca420f1d2d853b08d14d1037b15b72b9768b3898407bec7e95cba675e439c898a3749a3
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KUs:ZVxkGOtEvwDpjcao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-12_79caa573ac0af84f31af3ac3fa0178e4_cryptolocker
Files
-
2024-09-12_79caa573ac0af84f31af3ac3fa0178e4_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ