2024-02-18_f58a039ace660d9e27a672a9088a1f67_cryptolocker
- SHA256 cc6e8b142a00d3d9be85c6c3f7dd7a87f5ac2f88a028d69b3733ccfbb6bfaa61
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=11, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=148, productName=Unmarked objects (old),
count=4, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=4, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=11, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=687, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,