Static task
static1
Behavioral task
behavioral1
Sample
2024-10-04_f4c274a62567522309b5993e67f47b8d_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-04_f4c274a62567522309b5993e67f47b8d_cryptolocker.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-04_f4c274a62567522309b5993e67f47b8d_cryptolocker
-
Size
66KB
-
MD5
f4c274a62567522309b5993e67f47b8d
-
SHA1
2a372bed437f517cf8bd768b35bd4fd1f02087b0
-
SHA256
f280c0c7648aa2ddfe65c1054ba0b69b8a8a41553c4d8e7cfbf9de17dba9a172
-
SHA512
ae9f1cdfeffa87f5b8899cf55ae96a6f719aedc0bec4dd7d5ed0ad33fd6c84b5bc944a11068e79efe9cdefd9a9aa8bf3b99c9c6cee736c05dfc6e2bfd12c9385
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4w:BbdDmjr+OtEvwDpjM8i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-04_f4c274a62567522309b5993e67f47b8d_cryptolocker
Files
-
2024-10-04_f4c274a62567522309b5993e67f47b8d_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE