Static task
static1
Behavioral task
behavioral1
Sample
2024-09-21_47d67ae2524192f283aa8d4c0ecb41d4_cryptolocker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-21_47d67ae2524192f283aa8d4c0ecb41d4_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-21_47d67ae2524192f283aa8d4c0ecb41d4_cryptolocker
-
Size
33KB
-
MD5
47d67ae2524192f283aa8d4c0ecb41d4
-
SHA1
c391336b8e24458baf37f409e7c05c446258a678
-
SHA256
a4da0f43c8bd2e4ddcea30e69d8107eac2d65fca984ac236ac2d3f12b6d6cc17
-
SHA512
cce714e3d3f63257f72405b03f47664d7b1cfc65fe928dfe65d3bfb9d33789c76bbdd74cb656fa7cffa5d8e78f2c0dcc9a6124bf8710c61885d5eb03448156e4
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjJ3y3Q7:V6QFElP6n+gMQMOtEvwDpjJj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-21_47d67ae2524192f283aa8d4c0ecb41d4_cryptolocker
Files
-
2024-09-21_47d67ae2524192f283aa8d4c0ecb41d4_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ