General

  • Target

    2024-04-22_d446838dd01e0f40b2c03f58428d0e06_cryptolocker

  • Size

    32KB

  • MD5

    d446838dd01e0f40b2c03f58428d0e06

  • SHA1

    e4b61d71532c19a0977dee89d67ce9d1bf7ab68a

  • SHA256

    6609b3a4f2cff6861651218b03adb6238dbd31793c326ccf3e01da1f55c79f24

  • SHA512

    b5a9d8b574035f298957e70168ac5af017747ce8087c250547ab43e1e299489a3ecf19f02ff89c1a3563fec213f523e65dfbb32647d3bf88ab6974e472a6f4e3

  • SSDEEP

    768:bFPm5zusFUB2preAr+Ofjg0S16avdrQFiLjJvtV:bFPmpiif/oc+vV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_d446838dd01e0f40b2c03f58428d0e06_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections