General

  • Target

    2024-02-21_dfef19693e679ce7c241180060b9f058_cryptolocker

  • Size

    81KB

  • MD5

    dfef19693e679ce7c241180060b9f058

  • SHA1

    22a3af0dbb9658b8e31d33cb8400ffd596d93f38

  • SHA256

    8330ca819391f8eb86b1875b46833a7d8f71bcfcd759e48c9e32fa46ff55f4b1

  • SHA512

    2ae60be985a1544ee981caac1ca6457013864a477e0649bb87607fcb6b0e276a49e5c5f76fb552c410615af231c06aa07c28efe289dc2207b0dafc3ca9cb8e53

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBd0s:T6a+rdOOtEvwDpjNtj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_dfef19693e679ce7c241180060b9f058_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections