General

  • Target

    2024-05-31_5aa04aa398897b0182fc79316438fbc0_cryptolocker

  • Size

    95KB

  • MD5

    5aa04aa398897b0182fc79316438fbc0

  • SHA1

    e9b012da503a21eeb201985342ad3d8c39d30b6e

  • SHA256

    8db727dd39a5d48819c1842956336f455db83f8fd2c640ff2e2919eec18a1a45

  • SHA512

    fed365e5c5ecde28bb4d4b1e2ab0661c8991e0a3cf0c55a530d48c9f7288e763cd1d6a85e45ac4bf89381d4d550a95a42905226989ebc414ba99902c09ef8b57

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/kKy:zCsanOtEvwDpjBU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_5aa04aa398897b0182fc79316438fbc0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections