General

  • Target

    2024-01-28_f066aa2fa881fd4ae9ea6941f1238d4e_cryptolocker

  • Size

    47KB

  • MD5

    f066aa2fa881fd4ae9ea6941f1238d4e

  • SHA1

    0fe651dfecac81eed6effd81142dbe7981acc355

  • SHA256

    0e3221d9a7d87a69e3cfb71048afe81879204f4c77cef83f1a7417a0e938c4d7

  • SHA512

    382d42767c16ffdb82582e446f2158ee0d9afce377e9e4d029c4bce3fde13ff15c4fc2ef275bbbcea72c9989196dd1a2392ee3e01d3572c7a92c1b6a8e649f15

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpzr:XS5nQJ24LR1bytOOtEvwDpjNbP/0GgR

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_f066aa2fa881fd4ae9ea6941f1238d4e_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections