Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_4e90e33d5041d0d3920e9d36e8b64621_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-09_4e90e33d5041d0d3920e9d36e8b64621_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-09_4e90e33d5041d0d3920e9d36e8b64621_cryptolocker
-
Size
120KB
-
MD5
4e90e33d5041d0d3920e9d36e8b64621
-
SHA1
f831f2c622b5850280b3d7855c8bd1c80942e646
-
SHA256
0504fecd3d88bac70ad5c327bc6762d3ffb9726541f5124f639cbcf295878ea7
-
SHA512
ff6bad460a7737650b3183f1c0cf03099ec936659cc7b9e15232ea562d22b1ac91a7a489fb533c64fd8cbb3e827beb634f1fcda573f541a077d4bbb4012afae9
-
SSDEEP
768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTP:gUj+AIMOtEvwDpjNbwQEIPlemUhY/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-09_4e90e33d5041d0d3920e9d36e8b64621_cryptolocker
Files
-
2024-10-09_4e90e33d5041d0d3920e9d36e8b64621_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE