General

  • Target

    c9c3d2e43cf2892083403b9bd416989574006e26a97f6fe0e1951237f75ef908

  • Size

    40KB

  • MD5

    6011a61864d0fd3280eb8b430ab718db

  • SHA1

    0e3fa88bc7b796d97425482976f96d3cc6e5acee

  • SHA256

    c9c3d2e43cf2892083403b9bd416989574006e26a97f6fe0e1951237f75ef908

  • SHA512

    0c96fc411caff62c29b32becedce401b30d7bf1ff4531363c8ab29afa231c906c63559098fd543a90745cff0edecf652cee10c2ed8a3828ae8e978ab7fb31897

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan8j:qDdFJy3QMOtEvwDpjjWMl7Tdn8j

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c9c3d2e43cf2892083403b9bd416989574006e26a97f6fe0e1951237f75ef908
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections