General

  • Target

    2024-03-29_f27ebae79d35b428cd8e88be05773ef4_cryptolocker

  • Size

    66KB

  • MD5

    f27ebae79d35b428cd8e88be05773ef4

  • SHA1

    5e254dfb4eb3e185be318405623e248d8a2b74df

  • SHA256

    9618c5de81f37b3e6f307eab30e857aa0972b74be0016eb72e514de130ff9aba

  • SHA512

    7e4fab0be37795bb6cd1fdd6d0d6640e61ffb48081d99ffefac237522f05c9a98fd699c64ffc5b0caae4a60bccf3ab62051fc7ffb44ea98ff4b32cfd854d6738

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UnU8:1nK6a+qdOOtEvwDpj4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-29_f27ebae79d35b428cd8e88be05773ef4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections