General

  • Target

    d644b90a4f6abcf5f9961b0f7a9503607614775ebc51c876459a6e90c805e608

  • Size

    39KB

  • MD5

    96bc2973b8169b08abf5339ca62cde31

  • SHA1

    6b958ee8e0f1d2d3781dce268bf3da6a6764d8e9

  • SHA256

    d644b90a4f6abcf5f9961b0f7a9503607614775ebc51c876459a6e90c805e608

  • SHA512

    6955332b24038002165ac9c10ef8c9d5c94ad92c162eb5bee521b62e23203830ef8795506dc71092cdfccb5539322896d9d4e01a87640b0427f3784f85c92395

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaIzlnY:qDdFJy3QMOtEvwDpjjWMl7TdEnY

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d644b90a4f6abcf5f9961b0f7a9503607614775ebc51c876459a6e90c805e608
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections