General

  • Target

    a9e4f9f4fa739c11507669f85f5d4720d4c5ec2963e2d8fbee09dd87cafdb6b5

  • Size

    88KB

  • MD5

    4e4da3cdae98eda29cc0e04ba94ac3a3

  • SHA1

    431225094d16827e3371dc145c9d3b8550706ac0

  • SHA256

    a9e4f9f4fa739c11507669f85f5d4720d4c5ec2963e2d8fbee09dd87cafdb6b5

  • SHA512

    27772f075f04acc8c38df1de97fc0028c5e2a531fed2f5daa3939b154d7803538220d81f8d265bfe45c43ecb34c196c94b2cf269d36d4905f5b34e24d6a0d25d

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODC:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a9e4f9f4fa739c11507669f85f5d4720d4c5ec2963e2d8fbee09dd87cafdb6b5
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections