General

  • Target

    2024-02-18_bfba8bcdafad9290b69855ac379f3f4f_cryptolocker

  • Size

    106KB

  • MD5

    bfba8bcdafad9290b69855ac379f3f4f

  • SHA1

    9ef35af266a63be555489278647213081b6ebf16

  • SHA256

    37353a811f9cc07a74af54fd7f714a5be6d152e90f8bcfca76d7bff17b0fcb6d

  • SHA512

    1008b464d42147d835504da47a68b5b4023583a76a9dcbee77f34f6215acdf7eb34416e14a36f664001f21430e3cad86db450e688e70b513bb43fbbb893bcaa0

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GkszfE:1nK6a+qdOOtEvwDpjg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_bfba8bcdafad9290b69855ac379f3f4f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections