General

  • Target

    2024-04-29_fa5acee6b2b185b87abf04e81deac7dc_cryptolocker

  • Size

    38KB

  • MD5

    fa5acee6b2b185b87abf04e81deac7dc

  • SHA1

    22b6deaeb1586997b9db079bd16c0dc0401c651b

  • SHA256

    abe780e8eb7ed7f38598b10ac87f5ae17a191bea65643d50b191adf5fc341cbd

  • SHA512

    54d208fcb6f60b7e07b6a9833c8e4076c9619edd83f4a4ffb073d20d649bb79bb3d7cae73b3b3f54582645c7039f8864bfc89b91b88950ae9983a3538c00ddff

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYa8:qDdFJy3QMOtEvwDpjjWMl7Td8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_fa5acee6b2b185b87abf04e81deac7dc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections