General

  • Target

    2024-01-18_056b219484baaa8f8a702d42ac38b800_cryptolocker

  • Size

    116KB

  • MD5

    056b219484baaa8f8a702d42ac38b800

  • SHA1

    e28945fc36494e738ca6df63e45291f6dcc84255

  • SHA256

    30e3b64bacd44801f5e25398b77baa4b393da238bcbde8ffd9cd567b158d6ebc

  • SHA512

    43922797b2c853c1b61a1a224ed16fb594f3e82e311f3707920b1c33a7382fc9b9f0496d5fdd893524ae04dbb42b11e74ca8904237fe5d71b1d9378268b65f2f

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01QM0:z6a+CdOOtEvwDpjczm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_056b219484baaa8f8a702d42ac38b800_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections