General

  • Target

    2024-03-08_c89739297e01d3783092def8b88b45f9_cryptolocker

  • Size

    104KB

  • MD5

    c89739297e01d3783092def8b88b45f9

  • SHA1

    84a1cde8dfa05cab9f15e6dce30528df51f1e5c9

  • SHA256

    f3f01a81f2acba5305469a87b9b900cace74669babfb0a11014f9fd2a4a74ac6

  • SHA512

    7b5be9146ef392cdd2225ff399d72f7e0e46e4828e135e72e8173ac05aec0474cd7d8dec822fc44366814e8a92f487abb668fe0364840ff5c06459071df02dd7

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gksya:1nK6a+qdOOtEvwDpjn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_c89739297e01d3783092def8b88b45f9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections