General

  • Target

    2024-05-04_0cf65d91a8c4f24648d19a4b3d916487_cryptolocker

  • Size

    68KB

  • MD5

    0cf65d91a8c4f24648d19a4b3d916487

  • SHA1

    6bacd50426c608c93e824abab8b697df6e6dc588

  • SHA256

    1660c68f4f3fd308fefbfeafc8214cd604dbe2897432a05c89fb0903820aa2af

  • SHA512

    6dd2f96685bb7b0b084840f4845abe39a0c353e3bd764927dc8616762b4fc27ef9658ab7831213de35866475ccb3cc928118ae8c7def5bef1973313d4ff4c844

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UncHUBK:1nK6a+qdOOtEvwDpj+K

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_0cf65d91a8c4f24648d19a4b3d916487_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections