General

  • Target

    2024-05-31_08a66efeedf847467f5d52c5935ae485_cryptolocker

  • Size

    79KB

  • MD5

    08a66efeedf847467f5d52c5935ae485

  • SHA1

    c6dc457d566f4407256edacf3b2579fb5d60f440

  • SHA256

    d113a9e66d027713c84ae32905bbf92ce85b930e8851bc16fdedab5a3857e0f8

  • SHA512

    e58315482806c4ad739bc7119c309208cb9013d06c403011e812eaebcaa228ff6f506f8357704c9cc74e9709b3ea0028a2d67f8c99ee335a6c45f7c0a1fc552a

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1D:T6a+rdOOtEvwDpjNtHPo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_08a66efeedf847467f5d52c5935ae485_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections