General

  • Target

    2024-05-12_cda2899598a0bd45d21f96a9bb84819a_cryptolocker

  • Size

    66KB

  • MD5

    cda2899598a0bd45d21f96a9bb84819a

  • SHA1

    8dbae3ef3f61cb509132042b4bea058f6c86c5ab

  • SHA256

    c2e96ddd8f3db8fd429e818c6aefbc4fde1c295f947250070a985083612c4f01

  • SHA512

    94ec7971150a85feda0b1bf18399d76b28842f8c5cae16fd73f36ebf7d994c69338eb9058154afe82f70dfcfe61906f7ddde2dbb1e9bc350b50d6cf7530cdb5e

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xDyU:1nK6a+qdOOtEvwDpjn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_cda2899598a0bd45d21f96a9bb84819a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections