General

  • Target

    0e15f56eacc76d8f99eaaf952a7b1c990098995c7d2022d46c501d79bbd2594f

  • Size

    39KB

  • MD5

    94f00e007e323f45f45e2efefc6ae750

  • SHA1

    349a5f6ac180caac2b17c68141f996ffb152fb28

  • SHA256

    0e15f56eacc76d8f99eaaf952a7b1c990098995c7d2022d46c501d79bbd2594f

  • SHA512

    e14b916f9e00b4cbb87cbfc6af7a1e467c4f4b0376a60706f4bc476c2b0b447e9a34c3c55b2f02bbc42eb8d5202e396725244fe67e33e690ea16b4d0d18c24ad

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYe:qDdFJy3QMOtEvwDpjjWMl7Tn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e15f56eacc76d8f99eaaf952a7b1c990098995c7d2022d46c501d79bbd2594f
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections