General

  • Target

    2024-04-22_ca32aa3249aac7f9e3d887a8b5651ecb_cryptolocker

  • Size

    65KB

  • MD5

    ca32aa3249aac7f9e3d887a8b5651ecb

  • SHA1

    0c4b0e5c42231d9ae76e95f5a02527945f7b9a25

  • SHA256

    35a05e7eaf8b6ecf0c54362f74a8288c53039f8393f882a5923f9fc65fc57a89

  • SHA512

    9c1ca53a7b28c402b0936aa9d0342a42a8c9a8307c0ac1ccc0f892d7d2b029e10983f799f07abb11cff52896e2ea8278e9c8a7fc4eb76f52577bd67c345c7c1d

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5k5BS:zj+soPSMOtEvwDpj4kpmeLmQ/S

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_ca32aa3249aac7f9e3d887a8b5651ecb_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections