General

  • Target

    2024-04-25_3d5af348cb5bd17f062bc053855f4e18_cryptolocker

  • Size

    38KB

  • MD5

    3d5af348cb5bd17f062bc053855f4e18

  • SHA1

    a79fbea89d4de314a4e8f29f45c63841001f2660

  • SHA256

    1b69a35db631701fdc23da7a8ec4510b0afa59b6e90061742a754e9f245d30fc

  • SHA512

    ca136ca4549d6ae718a2a8d5d3347d939098e95be49e1d3621a6dff3b643076f61201d17611afbb64c36bba80058199d71fb0b13341386023b9e68dbe9b2bb18

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaW:qDdFJy3QMOtEvwDpjjWMl7TdW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_3d5af348cb5bd17f062bc053855f4e18_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections