General

  • Target

    2024-05-03_b891a98e414b1988bd75325f6972d134_cryptolocker

  • Size

    21KB

  • MD5

    b891a98e414b1988bd75325f6972d134

  • SHA1

    4413c6d7f1d0132bee0bf71b5bbebfed28ec23df

  • SHA256

    7a01f35327df73df46b76cef23ff97e19f4f8896fe818f4416482b5e25144f5b

  • SHA512

    bbff20038ae0c570b7e1fab01b38e5fae77ebd1d2b9cfad75fbdf3e84f5f3e5e0e6ca73666a928e651212c283d2c9c50472fc385499e0d36a87764f98b4b0cf3

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6W:bVCPwFRo6CpwXFXSqQXfjAW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_b891a98e414b1988bd75325f6972d134_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections