General

  • Target

    2024-05-02_fd9af6b6e6f2340de39488b195ef31e4_cryptolocker

  • Size

    82KB

  • MD5

    fd9af6b6e6f2340de39488b195ef31e4

  • SHA1

    6e4505eba0bee6e45470314b817e3ecf768e74fd

  • SHA256

    711c8a3cf102241e8df187004a16767ea6b81f90de47d59e2995f32b8b74417a

  • SHA512

    a5434145767e3fbcecf858fb0a8101809711511c8a6cc539e60e5dfc6829130ca03b5cc4a85b11a57f743dd24cacb2d0e4a9fe0c07ce95ee5b20bc026842ab88

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7f:T6a+rdOOtEvwDpjNT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-02_fd9af6b6e6f2340de39488b195ef31e4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections