General

  • Target

    2024-02-28_cfae65368cbc49850ea659d5ec03f956_cryptolocker

  • Size

    63KB

  • MD5

    cfae65368cbc49850ea659d5ec03f956

  • SHA1

    b46a205c83b7768542675f9745ba75919ea65574

  • SHA256

    1b0380989d31dc19e2626e0f94269efa3896e29f3e1b0d2e61537503543780a0

  • SHA512

    b63102472f7a2526a93d6c014dca14a0efa1e2d78975fcf60a2fb0e2129ae96bfe431fa64b928943b12e32b369f897ca489683f4de02dca66707c387b799c150

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5K7hF1y:zj+soPSMOtEvwDpj4kpmeLmW1y

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_cfae65368cbc49850ea659d5ec03f956_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections