General

  • Target

    2024-03-16_c4a4247ffd5b039942b7b545357f0be4_cryptolocker

  • Size

    34KB

  • MD5

    c4a4247ffd5b039942b7b545357f0be4

  • SHA1

    9bc9f12c5c1eeb60f9fe79b69baaaf848d39e554

  • SHA256

    b11b3af133669d7c2df681fab8de5ab39bd300672a4b0f0d37a279fe99d3b0c2

  • SHA512

    89dfd4527e36dbbad3433978a36c894be21fcb96b7a8f2d1f80cd2322b75644b28ff335c910f5ff77bbc985c5677bac79c42e983eacf4caaa63b2b770ac44f4a

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axKuiU:qUmnpomddpMOtEvwDpjjaYadl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_c4a4247ffd5b039942b7b545357f0be4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections