General

  • Target

    2024-02-18_4e6dee9a7546619cf702d51954062868_cryptolocker

  • Size

    113KB

  • MD5

    4e6dee9a7546619cf702d51954062868

  • SHA1

    16db63a594c9f105fe0523464a10c1dde709cc97

  • SHA256

    d13011ad1e38fd7c8b5e6f6d0aac89ace0f69c916db0b03240a752be4e08d987

  • SHA512

    facbcd146fb8dca960c3b5eb00e8347f1f9f46a4d27b10abbdcb5d1392acc3c4b11fceaa303b4ffc4ce098aa7c39db986118d6e8a4cc4a2873e32759c9b29294

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgpwbCL:z6a+CdOOtEvwDpjczG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_4e6dee9a7546619cf702d51954062868_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections