General

  • Target

    2024-04-19_49cdda79a4cdae35b2d2595f90efea9f_cryptolocker

  • Size

    37KB

  • MD5

    49cdda79a4cdae35b2d2595f90efea9f

  • SHA1

    c0a7ae88f84cb2088a570c3afae3b6b96ae22a31

  • SHA256

    34206a6fa1b7376c4a0e2806bd82e586828a09933b1b0842c67b7fc28d8ff801

  • SHA512

    d2e5388da5973151ec707b92a6b83520daa04bc9cd00dd75962a641a48cabe2ed53868f540bb7a5d38e238842d7fa20903fa69689e8284d30d2ce40f12b775dc

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBp:qDdFJy3QMOtEvwDpjjWMl7Tdf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_49cdda79a4cdae35b2d2595f90efea9f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections