General

  • Target

    2024-04-16_c18a1b8d3503508e1eba2b6d65d41b63_cryptolocker

  • Size

    106KB

  • MD5

    c18a1b8d3503508e1eba2b6d65d41b63

  • SHA1

    4422d2795897b1ccdca56f5d6f086198af0c1b62

  • SHA256

    7170e71e614f78dfb9c69dd48f6ea4a284bcfedd9621fd06bfb0df4902fa42b7

  • SHA512

    98bac5c62c50dfca418e108479b94aa8eaf68ffee09418659291604add5c18c531c55e8e20c3924e13f3143351b818e3a909c4ad0610706ced183b5247dadcf0

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksdEU:1nK6a+qdOOtEvwDpj3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_c18a1b8d3503508e1eba2b6d65d41b63_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections