General

  • Target

    2024-05-07_fba3f3d6e495364c588f9679ce9abec3_cryptolocker

  • Size

    50KB

  • MD5

    fba3f3d6e495364c588f9679ce9abec3

  • SHA1

    1edf48eaf68ba59e576c5a09a06c367a27d1bd4c

  • SHA256

    4f447a84e8a0ef70400ab2b2448d536cab838d4660af20a398171fc2a6539571

  • SHA512

    c2893b8f685ca67fc8533193bae97210fa41dab10cd1c4befc95c60a96591a9928872c82f0e59015ad96e9ad4fd4d25ebd6cf8b15179c0b978a9d39d6e8170c7

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2Moc2n:qmbhXDmjr5MOtEvwDpj5cDtKkQZQv

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-07_fba3f3d6e495364c588f9679ce9abec3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections