2024-06-13_5d303cc11e5c982a5fe6b9063913567b_cryptolocker

General

Target
2024-06-13_5d303cc11e5c982a5fe6b9063913567b_cryptolocker
Size 66KB
Sample240613-d4jbtswfpl
SHA256 c5337cfe4119c7a7f51654d3964338758a2d4cf9cf6e7288d7f3192ad92149cf
MD5 5d303cc11e5c982a5fe6b9063913567b
SHA1 bb9d20516358d64becb60123bc8400fc15d4183b
SHA512 a1ebacc5f7ca616856c013e7066b5d9914100173eb989da649ec4c3d1bbcae2d758344e49963152b06c1d17aed6a59fb2bd1a3ad8731ea15b23b85e165ad8233
SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UAXtL:1nK6a+qdOOtEvwDpjZ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

resource	yara_rule
sample	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-13_5d303cc11e5c982a5fe6b9063913567b_cryptolocker

SHA256 c5337cfe4119c7a7f51654d3964338758a2d4cf9cf6e7288d7f3192ad92149cf
MD5 5d303cc11e5c982a5fe6b9063913567b
SHA1 bb9d20516358d64becb60123bc8400fc15d4183b
SHA512 a1ebacc5f7ca616856c013e7066b5d9914100173eb989da649ec4c3d1bbcae2d758344e49963152b06c1d17aed6a59fb2bd1a3ad8731ea15b23b85e165ad8233
SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UAXtL:1nK6a+qdOOtEvwDpjZ
MD5 SHA1 SHA512 SSDEEP

Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths