General

  • Target

    2024-05-29_af1bd13923870298446e048f7f4ddcff_cryptolocker

  • Size

    79KB

  • MD5

    af1bd13923870298446e048f7f4ddcff

  • SHA1

    39d677192d429968700ce02dc64409976d9061e1

  • SHA256

    9710f2900128cf33b39b6c6d0e152d3e2f7756a88b1dd2ef4445b73c770d43f1

  • SHA512

    49fe146a7922a794e23e5fbaca79ff25af894da5157bfe30abc7d296507ab133f48eadbe9e331c0dacb565d1c69de59eefd64ad3cda6d73cfd9255de8b76b63c

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdJcRv:T6a+rdOOtEvwDpjNtm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_af1bd13923870298446e048f7f4ddcff_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections