General

  • Target

    2024-05-07_38822bf444372a96cb36accb347bbd8c_cryptolocker

  • Size

    36KB

  • MD5

    38822bf444372a96cb36accb347bbd8c

  • SHA1

    15b91c5ae0bbb80a15462b806687da99fa7f250d

  • SHA256

    812e144c4d00b0556b3983e6afca00df2c50dcedb7a518501082e236c4123104

  • SHA512

    8a3384b4f308e9f0d753b1f2d6347805ba1ef5ab6f0c801a3a08a74a19f36d4a27209b7b2f45e161dbd7dd86922a9e9f7cb98f261a42384869a55b033c7fcbf6

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3F:qUmnpomddpMOtEvwDpjjaYaQF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-07_38822bf444372a96cb36accb347bbd8c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections