Static task
static1
Behavioral task
behavioral1
Sample
2024-09-29_9eb31c63b571fe620ab831325ba1a844_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-29_9eb31c63b571fe620ab831325ba1a844_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-29_9eb31c63b571fe620ab831325ba1a844_cryptolocker
-
Size
66KB
-
MD5
9eb31c63b571fe620ab831325ba1a844
-
SHA1
818a55894558ce0b19b73d9a1ff816433952f804
-
SHA256
12f110faefbcad1a7be35414829bcbca7ddbeddc073bf2b61b3580ee0a9ba2d4
-
SHA512
51c06b712da218ec58387f032eb621aab3d2955dcb3e028c1729c83cdd8ba30375354be075fdb126187921dad8f635b6164715cf6dc2b25f09a8064337473e41
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi6:BbdDmjr+OtEvwDpjM8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-29_9eb31c63b571fe620ab831325ba1a844_cryptolocker
Files
-
2024-09-29_9eb31c63b571fe620ab831325ba1a844_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE