General

  • Target

    2024-05-09_ecfdaa1b909d4792d8d8986c05fd4003_cryptolocker

  • Size

    38KB

  • MD5

    ecfdaa1b909d4792d8d8986c05fd4003

  • SHA1

    00326f312a1713b92bc2ebb0798656b1730dd3dd

  • SHA256

    1ec784468a3df2ab9df57f0995299a8712d867abb35dde37ba320c1675c1405f

  • SHA512

    e0ca97767d91de5c4d14975491fc1652aff318871c737d87f987ad15892afc5f273e7a07259d0da914a75d10f0abc4187441c451e76f047c2afad3014e61c711

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/Q:qDdFJy3QMOtEvwDpjjWMl7T1

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_ecfdaa1b909d4792d8d8986c05fd4003_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections