General

  • Target

    2024-04-29_84415d9ed03b1f7f67da7c7fb5065a40_cryptolocker

  • Size

    38KB

  • MD5

    84415d9ed03b1f7f67da7c7fb5065a40

  • SHA1

    b32fc54ccae0ba02bd7fdd1c25fb4f6c22633189

  • SHA256

    b44cd09d05369d7b071b1817c53e78925452af8769cbdf9e7fb3795caa5d3b50

  • SHA512

    da290bde0faa3fb9d61bcc62235367f2f5a0f4fe4b1ee168e57fd7c253ca630452ec1f2dc7a42e529e741d7f3e77c04a94f1fe1b3204048deeee05f1fb7dc47b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfQ:qDdFJy3QMOtEvwDpjjWMl7Tt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_84415d9ed03b1f7f67da7c7fb5065a40_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections