General

  • Target

    2024-05-23_f158118e8047c8dcbe0592d0804db400_cryptolocker

  • Size

    85KB

  • MD5

    f158118e8047c8dcbe0592d0804db400

  • SHA1

    e00c29644b1ef0c013c61476cb03ff42bbe8327d

  • SHA256

    c934a16da796aa8043d62684f58f4201b377fd9d548c5ec7a9bd949838d7394d

  • SHA512

    7c007e4bf10819cc382daa83e447803907e7c3946b86a592a485c10a1bb4bf91fac82e926d1e33d9d76038c7b122f5de68aa7b057c1ba4a014be51fc3f8bc8ce

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS19:zCsanOtEvwDpjX

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_f158118e8047c8dcbe0592d0804db400_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections