General

  • Target

    48c912138f3541bdd58bf84f20a900f91a8d936f0f2a9de490fd5be9fa2ab30f

  • Size

    36KB

  • MD5

    b0f862f3434997362a575cdbe01c0df7

  • SHA1

    ed606a2ae39d208e23f265a31c789ac43d30549d

  • SHA256

    48c912138f3541bdd58bf84f20a900f91a8d936f0f2a9de490fd5be9fa2ab30f

  • SHA512

    cb0384947968e7232e2ef431171ddc2fdfe757932d0fb0d2bfe35c1eecc41a6819163d322b10e049c3883763e1e6f293356fe48217212a406496f20cf36798c0

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYe:qDdFJy3QMOtEvwDpjjWMl7Tn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48c912138f3541bdd58bf84f20a900f91a8d936f0f2a9de490fd5be9fa2ab30f
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections