General

  • Target

    2024-04-16_c30a365efc4628368c2a9ae6c47ddef6_cryptolocker

  • Size

    35KB

  • MD5

    c30a365efc4628368c2a9ae6c47ddef6

  • SHA1

    1d5523382235e6d56779d7d014d6165651b9ed0e

  • SHA256

    18d21fdbaa1f40972388a103bac5ba27a4c07ffde8a9826ceef13dfb9c3fdbcb

  • SHA512

    b08fe29c7a57cbcfacd5eadd31152cafd0435d489c6c27429c5fd66616ecb5487e22a345264a2a65e341ac3d04c42049158180088f83fdc954266f3905071033

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAP3:qTJu9cvMOtEvwDpjppVXC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_c30a365efc4628368c2a9ae6c47ddef6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections