2024-06-10_211fba00fba7d59896d0ea144970f754_cryptolocker

General

Target
2024-06-10_211fba00fba7d59896d0ea144970f754_cryptolocker
Size 33KB
Sample240610-1akdcs1gll
SHA256 b7de1675963c4a55186280fe63b1026db1dd8142e0d5a9ac2ea15ed1dabf6f12
MD5 211fba00fba7d59896d0ea144970f754
SHA1 bd6ffbe1cebf5bcc461215404f32a4db419a7e07
SHA512 65919fb5107ca521b0132ce2096128cea52868fc203b8b7521c82562ea4607b624d1fa1398b4b5f6d63797706e60f224a908569ef2ec46e62d50b6c95975cb90
SSDEEP 768:q46yu4M3Eu2smnbcuyD7U9dtOOtEvwDpjeMLa5vONre:q4ZbMb2pnouy8TMOtEvwDpjjaKy
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-10_211fba00fba7d59896d0ea144970f754_cryptolocker

SHA256 b7de1675963c4a55186280fe63b1026db1dd8142e0d5a9ac2ea15ed1dabf6f12
MD5 211fba00fba7d59896d0ea144970f754
SHA1 bd6ffbe1cebf5bcc461215404f32a4db419a7e07
SHA512 65919fb5107ca521b0132ce2096128cea52868fc203b8b7521c82562ea4607b624d1fa1398b4b5f6d63797706e60f224a908569ef2ec46e62d50b6c95975cb90
SSDEEP 768:q46yu4M3Eu2smnbcuyD7U9dtOOtEvwDpjeMLa5vONre:q4ZbMb2pnouy8TMOtEvwDpjjaKy
MD5 SHA1 SHA512 SSDEEP

Detection of CryptoLocker Variants
UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

45744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths