General

  • Target

    2024-05-20_28a124be2a5d854939f9183e5747bb18_cryptolocker

  • Size

    90KB

  • MD5

    28a124be2a5d854939f9183e5747bb18

  • SHA1

    a5df313e4393c62bd3f7151985cc323709d4f3b1

  • SHA256

    3ca4628830b623818619a431e4ea8db9ffc424278b4449b109d8cfd60196dd1f

  • SHA512

    555feea66291012eb6edde55cc96a16dfae4fddbe7dc71852af8a45e94bf1da0e6c652e0b8decbdbbcd80fa3aae5889b8e9032137b0a052ef4ab66996bbb5a56

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/O:n6a+1SEOtEvwDpjYYvQd2Pd

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_28a124be2a5d854939f9183e5747bb18_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections