Static task
static1
Behavioral task
behavioral1
Sample
2024-09-19_ada376ee837c92364d427072e1e4773f_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-19_ada376ee837c92364d427072e1e4773f_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-19_ada376ee837c92364d427072e1e4773f_cryptolocker
-
Size
60KB
-
MD5
ada376ee837c92364d427072e1e4773f
-
SHA1
a8dc5f545cb55c002fb4104e3debfb1097baa8c3
-
SHA256
23ba2b5a2d2e31cb9f15345fe01e92ae067df2d555429cddefe9342e8e9bf264
-
SHA512
52b0d2f0e90ac71f5668c80b4b63de3ef02664064a0b61377baf2c8d5607431c930a9f9503c55a5872596cd364b78138cbd9567bef52f0f46ec2c3e2d47fe78b
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnN:ZzFbxmLPWQMOtEvwDpj386Sj/RsN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-19_ada376ee837c92364d427072e1e4773f_cryptolocker
Files
-
2024-09-19_ada376ee837c92364d427072e1e4773f_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ