General

  • Target

    2024-05-09_1cb2865aa40a4582e03be581cadaa967_cryptolocker

  • Size

    38KB

  • MD5

    1cb2865aa40a4582e03be581cadaa967

  • SHA1

    7a532eb99bd42a96d590a378c39ce93c8cc63d62

  • SHA256

    a674298080775eb7b3288fd65a0b2026e9ba199ea44bd343b9914fa6bec391be

  • SHA512

    087d309f9360db711eff05af852d5e3471242d005ceb7d1c940738916db47a780dfbbe02e8fab2e59aa3dc575275188c1e7c2adf5292857632c8e6aadf0205bb

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan//:qDdFJy3QMOtEvwDpjjWMl7Tdn//

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_1cb2865aa40a4582e03be581cadaa967_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections