General

  • Target

    2024-04-10_ecaf3a29459db7125b105dc6decbdd9f_cryptolocker

  • Size

    92KB

  • MD5

    ecaf3a29459db7125b105dc6decbdd9f

  • SHA1

    706cc14b367b5fbb8753cb5946e0b6d79044355f

  • SHA256

    49014440917c8f40accf2f4beedc1cbb55b819c565fa225ea981fd689b4386d4

  • SHA512

    77b9fee433c3bf98bebd3a77c524f6ce6574ae88e610c1f1ddcba2aae749fc051f76032f6a8fc047fba1562d88e32f88bb6f78434b9508022be529e2c8cfb1e4

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+5:AnBdOOtEvwDpj6ze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_ecaf3a29459db7125b105dc6decbdd9f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections