General

  • Target

    2024-01-27_ef12bf6197dc15e28730c2941a070287_cryptolocker

  • Size

    68KB

  • MD5

    ef12bf6197dc15e28730c2941a070287

  • SHA1

    64a623f1cfc8f11ce049b2345f579db79676d3b8

  • SHA256

    4315ccbdc306997327b20c8ba054a86b59b48ed9f343906f62e9e6cbbd630f77

  • SHA512

    f4f3d209eb6cd69d7bef7b96ddf1a21748834149c1bb843d5070b76eaf2505b5950bef4ce401dfab939551f08fe345eba08b64a41651a32d90f92679c7ff087c

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAeB+X:z6a+CdOOtEvwDpjQA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_ef12bf6197dc15e28730c2941a070287_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections