Static task
static1
Behavioral task
behavioral1
Sample
2024-10-17_5f9c0499a93c053dab260fe9075ad264_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-17_5f9c0499a93c053dab260fe9075ad264_cryptolocker.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-17_5f9c0499a93c053dab260fe9075ad264_cryptolocker
-
Size
39KB
-
MD5
5f9c0499a93c053dab260fe9075ad264
-
SHA1
516b15e3cf7733a63fa4880779f9e56d9b304cec
-
SHA256
b8bd7a3bb33138cc84c36b9beaba4d659aeed016c18e25d3cbc971297f9170f4
-
SHA512
9f8543a4b7d0ebcfca967db8e1f92ba79b24c5edd67be6572f142616528f5149b095e2e7d384a8d49b19016bc5d1b9e3874ba49ce43f4453ab2dcfc316c42274
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQLI3Jnoehy543yI:V6QFElP6n+gMQMOtEvwDpjeJQy1hySCI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-17_5f9c0499a93c053dab260fe9075ad264_cryptolocker
Files
-
2024-10-17_5f9c0499a93c053dab260fe9075ad264_cryptolocker.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ