Static task
static1
Behavioral task
behavioral1
Sample
2024-09-15_279186d8c0c6a843c0efc210846a15eb_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-15_279186d8c0c6a843c0efc210846a15eb_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-15_279186d8c0c6a843c0efc210846a15eb_cryptolocker
-
Size
72KB
-
MD5
279186d8c0c6a843c0efc210846a15eb
-
SHA1
7739111d2fe6b4eee32619cb3329a73b9856e67b
-
SHA256
d0f0c698c419d085404cef957dd5b6b4c25c1764db815c9d3f919103c2042384
-
SHA512
70b49c01553e5046b6f1f5571f152e73fe046995df7ac65e55781c2b91f1c8081d7ca0b196a510f9eb6ef7724f5688429b58068c5471cd17cb38196c9f8247b9
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZOt:DW60sllyWOtEvwDpjwF85W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-15_279186d8c0c6a843c0efc210846a15eb_cryptolocker
Files
-
2024-09-15_279186d8c0c6a843c0efc210846a15eb_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.uzwvn Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ