Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_43c654db534379b53488a84b1cff6a6e_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-09_43c654db534379b53488a84b1cff6a6e_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-09_43c654db534379b53488a84b1cff6a6e_cryptolocker
-
Size
45KB
-
MD5
43c654db534379b53488a84b1cff6a6e
-
SHA1
9bae06e7174a6487801d9fa86d29bf7f4e2b02a4
-
SHA256
bf1e18b4b3782872e0904c62c5fa02c4044160e9523a114fe7820ff51a078c1f
-
SHA512
dea5cf324260eba44036a40452c6e4da495e72825acde62356d557cd624f28d24662937915c59bd99e41ebe722175a2e9e62e1dae6ba7ed1d07a42071b211874
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTBhr:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6nr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-09_43c654db534379b53488a84b1cff6a6e_cryptolocker
Files
-
2024-10-09_43c654db534379b53488a84b1cff6a6e_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE