General

  • Target

    dfe0bf2e05889a05c837b05ff9b0944789e5b7261af9391ce0a0537d1ca3faeb

  • Size

    38KB

  • MD5

    f2511a2da42b30b381cfc2ea2230809d

  • SHA1

    c8e4e467fc072c8eaae9774830b3d006f84cb5f0

  • SHA256

    dfe0bf2e05889a05c837b05ff9b0944789e5b7261af9391ce0a0537d1ca3faeb

  • SHA512

    f2976f4736f3f1dec9304aeeaa69c70f93aa84d9c03e6c4f8680565c7e8651eefbdbe9cd3a0b8e6237a58efa7dbf761f3f0a6360642b72abb58c2254b3829ece

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYana:qDdFJy3QMOtEvwDpjjWMl7Tdna

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dfe0bf2e05889a05c837b05ff9b0944789e5b7261af9391ce0a0537d1ca3faeb
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections