Static task
static1
Behavioral task
behavioral1
Sample
2024-09-13_71bda0032dee7e4d13ed21aafff5d9d0_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-13_71bda0032dee7e4d13ed21aafff5d9d0_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-13_71bda0032dee7e4d13ed21aafff5d9d0_cryptolocker
-
Size
29KB
-
MD5
71bda0032dee7e4d13ed21aafff5d9d0
-
SHA1
a5197f29c92d7b1370ec4e837bc561ef32a71152
-
SHA256
e8a7adc82a7b354030da5ab1e3609a8a57ff7bf8a6f359b5cfc719be7e6ceb6f
-
SHA512
086d34fb6785d5d635d1939b338d223c398b9396ce3ee953a0cfc8f65b1566b7aeb20c23f23b3c296fa001d84a9b090b0cc816e63e49bdbcb95d613967f1fdc9
-
SSDEEP
768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+D:q0zizzOSxMOtEvwDpj/arV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-13_71bda0032dee7e4d13ed21aafff5d9d0_cryptolocker
Files
-
2024-09-13_71bda0032dee7e4d13ed21aafff5d9d0_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE