General

  • Target

    2024-03-08_31813ce39edec42a41b14d3912f107f8_cryptolocker

  • Size

    77KB

  • MD5

    31813ce39edec42a41b14d3912f107f8

  • SHA1

    5ff3984f1b791e26d63d10e61cf5948be93cdf55

  • SHA256

    9b862f64447fad419ee31f3c3ebf84472864d7e3f55bce0b411bba59b5e6bf27

  • SHA512

    6d27d3ee6e853849fc95c733c42ec1e19dd6271872733c85c2e2eece2e97623f3403cd07d0db602647eeb5d7df19cbcdc6bc577da32f6e34eb36852fc0ce45c1

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kycg:zCsanOtEvwDpjK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_31813ce39edec42a41b14d3912f107f8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections