Static task
static1
Behavioral task
behavioral1
Sample
2024-10-10_2033782b32c32de648fe501f8d90d419_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-10-10_2033782b32c32de648fe501f8d90d419_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-10_2033782b32c32de648fe501f8d90d419_cryptolocker
-
Size
45KB
-
MD5
2033782b32c32de648fe501f8d90d419
-
SHA1
2f72d0d6ccafb226b4049cd0001b422b4f53d7fe
-
SHA256
509026976b9734265572296a8f1a9d2b760364ec83b8488efff9c1a65b5bcf39
-
SHA512
adbc3eedfd66c51210e709bf66deafe2ac783f6e7b8821269b8e4261c83055f4dc4382b14b5b5b3148861a048e262b30f9a4c4c4e599c28a5dd546e55a541fb1
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WcL:qmbhXDmjr5MOtEvwDpj5cDtKkQZQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-10_2033782b32c32de648fe501f8d90d419_cryptolocker
Files
-
2024-10-10_2033782b32c32de648fe501f8d90d419_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE