General

  • Target

    2024-04-19_f429757d60d92bd6c59bf6f9d5d8b077_cryptolocker

  • Size

    37KB

  • MD5

    f429757d60d92bd6c59bf6f9d5d8b077

  • SHA1

    e71e9a8dc315d1e025e4715d5a3983128b8dedf8

  • SHA256

    05c4cd433f3edf0f6057c066954964ba40438ef1656cba797466039c8596fd6b

  • SHA512

    ff161fc0ca3cc1607480654f2ade6e315c6b803f46a819b383877f9aca923edfad79ff2d8ea385c2735bb2820b1c08871f5fe7f6c4246519e3b80a087dae943d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBo:qDdFJy3QMOtEvwDpjjWMl7Td6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_f429757d60d92bd6c59bf6f9d5d8b077_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections