General

  • Target

    2024-04-28_bfa01878f80e51b28366a133a41d6357_cryptolocker

  • Size

    38KB

  • MD5

    bfa01878f80e51b28366a133a41d6357

  • SHA1

    2a854356d66b7f3c2e83cc980f137c0eabd0e238

  • SHA256

    a72884f6a51b454c3e750baf3253ac1b3ebb85433ff20ad7f74379675cc3253e

  • SHA512

    9b0a965fd8d23e7d2717dc791dab0a861a523bb80c24b32098e9849a1eeff70a2d33860672ad517864d929315155003e29df74dacef1894016b6b323c3203766

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaa0:qDdFJy3QMOtEvwDpjjWMl7TdL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_bfa01878f80e51b28366a133a41d6357_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections