2024-05-26_5f6e0ba8da7a6f88e6d80f77aec9a0f9_cryptolocker
- SHA256 35238b35648fa6b5a17f8e6f9a779c7d13ff69b9443c4580931371158bce321d
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=11, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=148, productName=Unmarked objects (old),
count=4, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=4, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=11, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=687, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,