Behavioral task
behavioral1
Sample
2024-09-19_1dedae0b43aaeaa7952addec722389b1_cryptolocker.exe
Resource
win7-20240903-en
General
-
Target
2024-09-19_1dedae0b43aaeaa7952addec722389b1_cryptolocker
-
Size
76KB
-
MD5
1dedae0b43aaeaa7952addec722389b1
-
SHA1
d9f91fa5d726ca5bfe20ce6af3656886dca29107
-
SHA256
c5ada925f2b4564a822b2de4b8eb62ed13d6f53e4ded28825db07e3b5c6489ec
-
SHA512
2bbf21bd3db8dc184893eb624b7e1609382e0e9b8feefe46dd4ce9100dc154e5804de0192bd3079247fcd573237d9ab0e9ce6b73bdcfb975f419826c7da2831c
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gc:1nK6a+qdOOtEvwDpjh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-19_1dedae0b43aaeaa7952addec722389b1_cryptolocker
Files
-
2024-09-19_1dedae0b43aaeaa7952addec722389b1_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE