General

  • Target

    2024-04-16_49967dc47b7d4b888e636c4e66ea673f_cryptolocker

  • Size

    65KB

  • MD5

    49967dc47b7d4b888e636c4e66ea673f

  • SHA1

    019dd26ceec517a9e05a06d0cced34f410caef8a

  • SHA256

    c52c64399ac834a61984b8258030cbb544be5771d0f1a2f58f26a1bf2a8be190

  • SHA512

    0851214158ee60d123c705a0f07d5120166e5987e711de26173cc23b7c99052b0f80b1fca91000f606a302ae27e1e538a522e6e48eb1854556632cb12f25db36

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5k5B4:zj+soPSMOtEvwDpj4kpmeLmQ/4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_49967dc47b7d4b888e636c4e66ea673f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections