General

  • Target

    2024-04-18_e3a9cc01960ab9885e81a83269db3c84_cryptolocker

  • Size

    102KB

  • MD5

    e3a9cc01960ab9885e81a83269db3c84

  • SHA1

    2789b21eae1c5d889823e9166d90ba5f182ef6d5

  • SHA256

    382d390b0a5c7e07c529ad842e0b8c3a33c51f109b9afeeb6d9c2e454861b992

  • SHA512

    90fa6d8f8eebe7865cd54650976836baf546586482391f6999977b6e862fa5576df569c6a77c90c0390d064eab09f20e68e9f6120c37014ea72c5af5b7e4dd8f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6C:AnBdOOtEvwDpj6z2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_e3a9cc01960ab9885e81a83269db3c84_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections