General

  • Target

    2024-02-12_ca3791f218a56cd0b6c873c584fca10e_cryptolocker

  • Size

    110KB

  • MD5

    ca3791f218a56cd0b6c873c584fca10e

  • SHA1

    f99ad3e96385855a2939adc87c3642437fa3fb89

  • SHA256

    8075bcdf5ee9fa4bea9144123852e049b19288619afb7dd2ea58205172663ebd

  • SHA512

    4d6f19dac6f1aca5759e77175e9504bcae86ef94653d74b7be3f591265a5139eb7e446f0d7f8fd18a4f1a63addb594739f6df032f99472ac63c77fff445ccd40

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwMgn:T6a+rdOOtEvwDpjLzD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-12_ca3791f218a56cd0b6c873c584fca10e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections