General

  • Target

    2024-04-06_aff16983e7b4f506a05862a7fc245d9a_cryptolocker

  • Size

    88KB

  • MD5

    aff16983e7b4f506a05862a7fc245d9a

  • SHA1

    c51c699106426a626760128235cd48faa09cef30

  • SHA256

    2090ae6e0859fc66c8567ad8736bb73423705e5aee4bdf0596bb5b32789efab9

  • SHA512

    355407dadbbbeb9a5eec5fb689e26f32c709eaa84c4b279f5bde430058db3c52da286c0cf1934defd64af01f86e3774ef2379bdc480766f001a5dcab997f3f08

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDje:zCsanOtEvwDpjX

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_aff16983e7b4f506a05862a7fc245d9a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections