2024-03-06_4a42e0431127a0e62be18f5754c7b129_cryptolocker
- SHA256 d33478106776d91ce9c16eeb1c93878c6d30d1efb5ba1e08ea52820e5fdd38bf
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=11, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=148, productName=Unmarked objects (old),
count=4, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=4, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=11, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=687, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,