General

  • Target

    2024-03-08_a27885e4d57da3aae654982e8d32e200_cryptolocker

  • Size

    105KB

  • MD5

    a27885e4d57da3aae654982e8d32e200

  • SHA1

    dea27bb1f83b9507357558c8e015db9d451e973a

  • SHA256

    49088c8da2dff3154de3f4a1f35f4a7857b3fe0053b898da9bffd9450483b8f9

  • SHA512

    f72658495dbbd9fac4fa7dc7114989aca6cbfff9512763dbab4ed54f533d191a83b0429b590517227cb96610705683376e61862dc51436dd554d21c21729e75e

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksW:1nK6a+qdOOtEvwDpjW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_a27885e4d57da3aae654982e8d32e200_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections