General

  • Target

    2024-04-06_c1cd174cb4db6a50cf42c56d42890978_cryptolocker

  • Size

    64KB

  • MD5

    c1cd174cb4db6a50cf42c56d42890978

  • SHA1

    aab4f0e3c4df649c9dc91db105c6d5f572592f2f

  • SHA256

    42b10314514c2d0d6b48767f4b6ef6c0faed23c225da50df64bfe35ac1409bb5

  • SHA512

    e5f9f82fa4fb4dd7d3191ba4b3ed9bd8f78cc92725b87e9e385eba8975b9d3741794f698cd85746d911f7a5ac34fb4ff148965fda58c39665fb687e2a95db417

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xD3:1nK6a+qdOOtEvwDpjN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_c1cd174cb4db6a50cf42c56d42890978_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections