Behavioral task
behavioral1
Sample
2024-10-13_069896187422839288ba17db2bc6a548_cryptolocker.exe
Resource
win7-20240903-en
General
-
Target
2024-10-13_069896187422839288ba17db2bc6a548_cryptolocker
-
Size
95KB
-
MD5
069896187422839288ba17db2bc6a548
-
SHA1
197fac71e49cd4731f7b6abddef4d9b27503fdd2
-
SHA256
4dd3268e9220777ac82507d55648c4e72a4642e00d9663733a14900b7b45f162
-
SHA512
759bb87dca45464a48038bea2357c644977aa81f910076f38902eac1c57df9e00b1ac687b2f80da6f350e7e0ed320a40976d17061be0b50bfe7b6a64685b47c3
-
SSDEEP
1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/kh:zCsanOtEvwDpjBW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-13_069896187422839288ba17db2bc6a548_cryptolocker
Files
-
2024-10-13_069896187422839288ba17db2bc6a548_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE