Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_585b912ec14004e6b561ab945fe0b549_cryptolocker.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-30_585b912ec14004e6b561ab945fe0b549_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-30_585b912ec14004e6b561ab945fe0b549_cryptolocker
-
Size
67KB
-
MD5
585b912ec14004e6b561ab945fe0b549
-
SHA1
94ec264e4607b422f16dc27376d5ca99b1b8250a
-
SHA256
8de56b72ecd6f42331496b0c28876073cefccb8681c30df698aa79d523f6f5ff
-
SHA512
867099b839f170ab97d19f4e9c7c4c2eb7a62ddf90185f52b499f93680ca42d8291c79a33ed0aff23b76e3574fa96b4acf4cc0990e8e8b0a468b12a9fab41ac5
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsija:BbdDmjr+OtEvwDpjM87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-30_585b912ec14004e6b561ab945fe0b549_cryptolocker
Files
-
2024-09-30_585b912ec14004e6b561ab945fe0b549_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE