Static task
static1
Behavioral task
behavioral1
Sample
2024-10-03_4594f97f67244ecfcc5c894e23231ba1_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-03_4594f97f67244ecfcc5c894e23231ba1_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-03_4594f97f67244ecfcc5c894e23231ba1_cryptolocker
-
Size
41KB
-
MD5
4594f97f67244ecfcc5c894e23231ba1
-
SHA1
2995b3403cd40b65035913b4366144d3deacfc58
-
SHA256
a5e066ef93f93b6637b98d8109fa63808ab408b36dfc1ea5746e1ddee8f28c25
-
SHA512
386b07400482eb2058ceef0266e9ac3a9f457be7fc29bf37390b09230e4e7d51574efa696b3c68c5de005e6c416f478808625e6c51af7a0680c2130161ecb1ed
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuD+h:ZzFbxmLPWQMOtEvwDpjLeJAsKcs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-03_4594f97f67244ecfcc5c894e23231ba1_cryptolocker
Files
-
2024-10-03_4594f97f67244ecfcc5c894e23231ba1_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ