General

  • Target

    2024-05-12_fdaf494e25f969205cce2a02d0ff1dcc_cryptolocker

  • Size

    97KB

  • MD5

    fdaf494e25f969205cce2a02d0ff1dcc

  • SHA1

    2c72e41329b4514002f7a0a8afcaeece132a179c

  • SHA256

    03eedd8434073806ef21959dfde8b1760ec3dfc31dec8d54df65d9037d8e988c

  • SHA512

    30ef3a9962481932cf0e9de9a74b0f49805184e324da3a665f619c36f015fab9b09eee25537333d9bbc8aa49834aa1a4f7be25c5115e46f40441f1bfae2b9dbf

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/bqr:zCsanOtEvwDpjBK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_fdaf494e25f969205cce2a02d0ff1dcc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections