General

  • Target

    2024-03-05_c490793050b58a1f07c1aff69fc699ba_cryptolocker

  • Size

    118KB

  • MD5

    c490793050b58a1f07c1aff69fc699ba

  • SHA1

    c1eb0f6fbfee6db317afe49fbb0a5db6538c4390

  • SHA256

    f84aa966d93e3a5f73cf29e94ac1d68e4fae628339a7110e1e2516c487016be4

  • SHA512

    e2dc5f501aa6bf73e1a0758ae0a4941b8ebac7381420da1fb5990d68eded753863f3ef23d81b6805046d016ae96262436cc761608d7b17a25f1ca4c1361d0bfa

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01ZNC:z6a+CdOOtEvwDpjczg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_c490793050b58a1f07c1aff69fc699ba_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections