General

  • Target

    2024-04-28_a29fa02998e12f3eac7a6b79e7b2f310_cryptolocker

  • Size

    38KB

  • MD5

    a29fa02998e12f3eac7a6b79e7b2f310

  • SHA1

    0e495d64e772bcef85316bdbf225ff68fce1d3ad

  • SHA256

    4b1c5f1d2ded5eb4e5030355cdaa8aed1c17859d1eaaa1f2a0d81452a8b3100c

  • SHA512

    777db6188ce57e6f7fd31a485486f04f1b53ef09a0d1f9685a52b21d5635f41ecbe2719b2b8ef71da014e994b2eae788b267a51505bce7e65eee112053b990da

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9F:qDdFJy3QMOtEvwDpjjWMl7TW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_a29fa02998e12f3eac7a6b79e7b2f310_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections