2024-05-30_59a1fc39b8bfb92945dc47812377bc47_cryptolocker
- SHA256 d681a92a53fad13666699c7b4f4289a8789051ca0dd16d2b259df3dafa24fdad
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=11, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=148, productName=Unmarked objects (old),
count=4, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=4, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=11, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=687, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,