Static task
static1
Behavioral task
behavioral1
Sample
2024-09-28_025af741371ad0437c4ce0c749169945_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-28_025af741371ad0437c4ce0c749169945_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-28_025af741371ad0437c4ce0c749169945_cryptolocker
-
Size
26KB
-
MD5
025af741371ad0437c4ce0c749169945
-
SHA1
998406c9d3c8b25e7bcb8294a36e1685904b3e42
-
SHA256
b937ac2193ec31f63a6b184516aecb983b34246a9d7370e75ebef580e15b8f8b
-
SHA512
9b6d1ce841b8469e6f22a7d02884bb70398d1ca859708d2db73cb25fb5df8bd3740631c9cbab8569a7a5ee948a66f78afbaadf45bf21c8736e3dff519ea46e76
-
SSDEEP
768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOX:q0zizzOSxMOtEvwDpj/arX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-28_025af741371ad0437c4ce0c749169945_cryptolocker
Files
-
2024-09-28_025af741371ad0437c4ce0c749169945_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ukiwGhLB Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MIZwSMcb Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE