General

  • Target

    2024-02-14_3ca3fd6947cfb86b9f63ea6a669d85f3_cryptolocker

  • Size

    82KB

  • MD5

    3ca3fd6947cfb86b9f63ea6a669d85f3

  • SHA1

    a0c969d0f2a54060a0a632a82d80ea8c649c5443

  • SHA256

    2ecd43def676aefc48b05b87548abcd56b119a7858fd8ae9e320109adcd62341

  • SHA512

    0a20296499f85ccf091ca070eb021b5cf98247efcfb7681764b7233f6095b6d6ae18bd5d82c091d6fc236b5da09e4a9676ca0e9dedd0981e9693ebd88f6611db

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7t:T6a+rdOOtEvwDpjNh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_3ca3fd6947cfb86b9f63ea6a669d85f3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections