General

  • Target

    2024-04-26_8dcf138cfd05a46a6b6c47d4dba61e80_cryptolocker

  • Size

    80KB

  • MD5

    8dcf138cfd05a46a6b6c47d4dba61e80

  • SHA1

    0835a19b8f958731e69525ff327b2e3cfd797c52

  • SHA256

    3706b6b0edfac33d0be82878cd4f067c34aec4219a81884fcc213f1b531616dd

  • SHA512

    284718d0ccfe47ae0488d7998a1744ad073a0dbf0465c8bc5e1801195162049c99da036a85f2daed78cfccfe44013e0581fe18515bca670f45aa2ca22dbdc68a

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdr:T6a+rdOOtEvwDpjNtt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-26_8dcf138cfd05a46a6b6c47d4dba61e80_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections