General

  • Target

    2024-03-09_00f6904b9289874b24011f5e8832b0f9_cryptolocker

  • Size

    83KB

  • MD5

    00f6904b9289874b24011f5e8832b0f9

  • SHA1

    c361765391769f00d0db1b34d12fa396d6dc1405

  • SHA256

    14f431afe64236ebfdae61a4b63fe217e5a4d8ee6b9b1c1da655b16379dc54fc

  • SHA512

    67de475013f40379bbc03d8c89db244c5d8721e279cc12ea31a2667dae78afb2b865fdb9960a273e5e4ab86a0e142e09e516e46698957707940f8863005a7d0f

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1w:zCsanOtEvwDpjG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_00f6904b9289874b24011f5e8832b0f9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections