General

  • Target

    2024-04-16_99e3fdb4cfc315d587272063f417c354_cryptolocker

  • Size

    35KB

  • MD5

    99e3fdb4cfc315d587272063f417c354

  • SHA1

    dcc0ef8b0a344fc93e37e05befe0b8bc7c89a66f

  • SHA256

    1a66b7dfd4a4ea3cfa2f8a9676cccab8dbac7b7df62c11ee0b50117c24e813c9

  • SHA512

    852478bf4346fd45723d641bed9093ef1066d585b450a0e611c8da46c47e586dda1396e4ee3344f84470e2c4eb9470ab824d5e5fc7b292292eab87821e210bb1

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axKt:qUmnpomddpMOtEvwDpjjaYa2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_99e3fdb4cfc315d587272063f417c354_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections