General

  • Target

    2024-01-29_a483a94782a03a3ca390dd877cf8a5a8_cryptolocker

  • Size

    105KB

  • MD5

    a483a94782a03a3ca390dd877cf8a5a8

  • SHA1

    977355f8863a7a0dbd52681b67f05b8480a71b0b

  • SHA256

    d057c1fcea44d87cd58556b76b6e7deef0437cc1a8471a6778b777551e636bfe

  • SHA512

    0aa2ce24976b420ab6c10500a2107baea6f312e6aa80c371633bb86423eff215fbfd0e577689db80651cdb0e5ba0e3028db21e4d08129843400e647fbb3de6be

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gksl3:1nK6a+qdOOtEvwDpjt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_a483a94782a03a3ca390dd877cf8a5a8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections