General

  • Target

    2024-04-29_4639add533902c5160a6d923333497e4_cryptolocker

  • Size

    89KB

  • MD5

    4639add533902c5160a6d923333497e4

  • SHA1

    56a59de4d4b18e88d1f3d1174cf56afffba9dd5c

  • SHA256

    3c65cae4f611c79e2055509bb59b2157c3155c2c99ce73e7fd4bfc543206caba

  • SHA512

    dc49d954a49c2e232ec6170eac15b307085ea1b6a0dd5065915497a5c79675e6d3881bc10b3b1b78ddc0e0852fcfc5ca121fa319dc8223d6448684fec603390f

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAgI:n6a+1SEOtEvwDpjYYvQd2Pw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_4639add533902c5160a6d923333497e4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections