20240521867bca29fccc82d64c46354d7b328113cryptolocker | Triage

Sharing

General

Target

20240521867bca29fccc82d64c46354d7b328113cryptolocker
Size

53KB
MD5

867bca29fccc82d64c46354d7b328113
SHA1

fc39af23f496b38adb849aed63c24b97c72a4f02
SHA256

1d7565cfdeaccb232d01ead3ca90270b5fca2b62675de6526dfdfb9acfc88dae
SHA512

571408615400195789842706b3b3908b0212d14c1de7de98d8d22e18e84d97abef37867fe1eda9c2f74153bde94d728e346a48c4199b6a41266ac9a6d5c1a75d
SSDEEP

768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkgu:z6QFElP6n+gKmddpMOtEvwDpj31ikgu

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240521867bca29fccc82d64c46354d7b328113cryptolocker

Files

20240521867bca29fccc82d64c46354d7b328113cryptolocker
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE