Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_32f054ad2422bdf20aa772f491968d2e_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-09_32f054ad2422bdf20aa772f491968d2e_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-09_32f054ad2422bdf20aa772f491968d2e_cryptolocker
-
Size
60KB
-
MD5
32f054ad2422bdf20aa772f491968d2e
-
SHA1
dd8790811d718834c103d92a0bac44f516eda645
-
SHA256
85b24be12373f37c8d62777315a89921a0600b0e81d5e00f201f475ed9724bf5
-
SHA512
438c2370646e99e05e62c548c8ac981e9da18179db9fe606fedad8423c8ac189226086931030c2614c1ca1c9169e25034ea8379ba813abfc3dad2a82c30a3286
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEWR:6j+1NMOtEvwDpjr8ox8UDEWR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-09_32f054ad2422bdf20aa772f491968d2e_cryptolocker
Files
-
2024-10-09_32f054ad2422bdf20aa772f491968d2e_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE