Behavioral task
behavioral1
Sample
2024-10-03_4047395a781395d39d2d891265bd1253_cryptolocker.exe
Resource
win7-20240903-en
General
-
Target
2024-10-03_4047395a781395d39d2d891265bd1253_cryptolocker
-
Size
92KB
-
MD5
4047395a781395d39d2d891265bd1253
-
SHA1
515d072e9b628684cf90676a18e7a99a822c4577
-
SHA256
f18daf85b367cef621086fe8add5908b063360a100c81fe2d0afd7869cb9c809
-
SHA512
48bb5686d6649e23eb926c9e2a4ac3dbcb82ea085dad4ad06c86778f31a3e7974ee569ca74dd3a3f4874be800eb605b90829a1535d0171e30b1f46517eb1dc36
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAe5:n6a+1SEOtEvwDpjYYvQd2PU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-03_4047395a781395d39d2d891265bd1253_cryptolocker
Files
-
2024-10-03_4047395a781395d39d2d891265bd1253_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE