Static task
static1
Behavioral task
behavioral1
Sample
2024-10-14_643de22b1388a28cf91d8c564c6a9629_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-14_643de22b1388a28cf91d8c564c6a9629_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-14_643de22b1388a28cf91d8c564c6a9629_cryptolocker
-
Size
56KB
-
MD5
643de22b1388a28cf91d8c564c6a9629
-
SHA1
8fd7a3fc3eda8c037d27373adc72129a9cc62a1a
-
SHA256
2d73fbfd275204eda71489a2e9b6ee3780bc271e3694dde6f198c3ed09395e30
-
SHA512
cbab970090ea44ed9473bdb849c3b3954aa6c50f9d417e038816d2c51ef4827029c071f66c6b442e844621bac1318071a314c67db029c42f4c0ff54036f30317
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb614O:BbdDmjr+OtEvwDpjMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-14_643de22b1388a28cf91d8c564c6a9629_cryptolocker
Files
-
2024-10-14_643de22b1388a28cf91d8c564c6a9629_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE