General

  • Target

    2024-03-29_c1fab8608907ca0d1db4188474b37487_cryptolocker

  • Size

    36KB

  • MD5

    c1fab8608907ca0d1db4188474b37487

  • SHA1

    e4b69c8cdd0ac1af16367fdf3b29072cb20eab07

  • SHA256

    3fc2cc3dabf0642abd279c9fc45b89d0b8c2803f3dfbb5b8568249440138baed

  • SHA512

    89c397b4bfb8eef7d6f8ca21bbea1eb1cc81ce4614d9af3a149fa848b502ed317f39bbef6e09f7038adc59417622e0cd7ed8ed1e4680e1d9e34e34b8cf904f36

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITm:qDdFJy3QMOtEvwDpjjWMl7Tm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-29_c1fab8608907ca0d1db4188474b37487_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections