General

  • Target

    db06bbacbaf8e9e9d6e6f861cb2345bd5cc9537d28fa47a98218f007f1364819

  • Size

    38KB

  • MD5

    c85dca0f92d3efa789b2f4e93859b909

  • SHA1

    5e04b48f6c05e97336a0b02505b6e7d11fd9427e

  • SHA256

    db06bbacbaf8e9e9d6e6f861cb2345bd5cc9537d28fa47a98218f007f1364819

  • SHA512

    e4e5d2668535b6237d718eab385e4f2a191f091060aab4049dad5ce13c3ba971e95aebbf287829d145f662f3df98bcc79afd468da86e8ab84f76a0e4717e2a86

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYans:qDdFJy3QMOtEvwDpjjWMl7Tdns

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db06bbacbaf8e9e9d6e6f861cb2345bd5cc9537d28fa47a98218f007f1364819
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections