General

  • Target

    2024-01-26_b9a87f9a18f7a0b8c16d9bbd296a5fd7_cryptolocker

  • Size

    81KB

  • MD5

    b9a87f9a18f7a0b8c16d9bbd296a5fd7

  • SHA1

    63e72e4da7004bbd61ea5d278f6d02e1794455e1

  • SHA256

    57d710fb290c21083b9fc5a30b679f1bf87d24f47bf17de589ef392091407c8f

  • SHA512

    db454b1790bf0c68cf69063f45a5c3ae4aa9e5f079d17c67ce475574059ee70d45973e56e35490366096a10f068cc129fce19e2265c91861514d438b1144e545

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1T:zCsanOtEvwDpjp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_b9a87f9a18f7a0b8c16d9bbd296a5fd7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections