General

  • Target

    2024-04-17_00b0f80df371b544072ff2e12e8debd0_cryptolocker

  • Size

    37KB

  • MD5

    00b0f80df371b544072ff2e12e8debd0

  • SHA1

    e4214e9eaae122801cf90ee20e20d244f5c43673

  • SHA256

    9c62a6654882aafc15253db2c813c7e0b19f13abcc7345ff3b86a378ef178f6c

  • SHA512

    1cbfd8efcd41984570c4e19803a0f41724a261c5c5eeb640773f40c88e5aa398cbeafeb2c79ac6750e950869e62b622724dd7ed98a0918a1354d6f4bd561279e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9u:qDdFJy3QMOtEvwDpjjWMl7Td

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_00b0f80df371b544072ff2e12e8debd0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections