General

  • Target

    2024-04-29_ff654151dd53e3ae98ba36b6d5973663_cryptolocker

  • Size

    38KB

  • MD5

    ff654151dd53e3ae98ba36b6d5973663

  • SHA1

    6ae68f7e37222ecc7c8221763b5f538d94882b3a

  • SHA256

    ab94e49ed4dfa7f7f77f2416275914df50501e87eef45e0ed01e6bd2ad13f486

  • SHA512

    5f2d4685768f171cd615382daddbe02f94e5d0f7232e3c8b4a85f4544a143d7309d38efc41748919bc228143b9753fc692c7b2e3f32e0f90dd26ae671eb8a9ef

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYm:qDdFJy3QMOtEvwDpjjWMl7TP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_ff654151dd53e3ae98ba36b6d5973663_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections