General

  • Target

    2024-03-26_f6f05856b56b433f9d80077cbd9887d6_cryptolocker

  • Size

    118KB

  • MD5

    f6f05856b56b433f9d80077cbd9887d6

  • SHA1

    8c7bf80fedbe111f24e1374510b31aac19b8dae6

  • SHA256

    52eb4beb16610ec72fc1cc97b5689e2f27ee5570ffd56a217f0cb519ad9ce4e6

  • SHA512

    2eb80168ab0abcd5c13fa1018c41671c1ae87ab58236d3bea38ee1003c2591553d7bc5c67a3e6312b2754ec00f4a802a7763f5e2adc02238d19f3b01ed8e1273

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01Qay9:z6a+CdOOtEvwDpjczq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-26_f6f05856b56b433f9d80077cbd9887d6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections