General

  • Target

    2024-05-16_0b649baf50612c57a9d5a3a208b70da4_cryptolocker

  • Size

    97KB

  • MD5

    0b649baf50612c57a9d5a3a208b70da4

  • SHA1

    2ffd41a7248e3c7be25b41ec819b5218214b131f

  • SHA256

    aa7f8662634ef449ecb8d7f9ae70f0fbf39743dc291519cf1c5e8b5026178cc0

  • SHA512

    8e42afa96012be2b192de53e7f421c1e7f4f636a08c08b250d06ebd5fb51b16ee4a0c5805f8d1371f0b079b97410e3137632eff37800c5d8eacf4d17bedf0f96

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/bq5K:zCsanOtEvwDpjB9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_0b649baf50612c57a9d5a3a208b70da4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections