General

  • Target

    2024-06-28_fdbc29fa491631fb145c10c6445b0475_cryptolocker

  • Size

    54KB

  • MD5

    fdbc29fa491631fb145c10c6445b0475

  • SHA1

    dc709db5712900f42b65e1a0b3ecd5c32d14acbe

  • SHA256

    5d343f407fb096b1d267bb6d582e3c22478aa308809e04e3333e3053157f5e3d

  • SHA512

    561101261d58169a1346bab27b89d7edffa7167a1d0cdd764f31d11202e2d3a7c3456e390a0a5d5e71d1b3548b5fcb0cb83cecc8181d2914b914b2ed638ce4f3

  • SSDEEP

    768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPR:b7/y28wZEjbnouy8G76iH/NLpr

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-28_fdbc29fa491631fb145c10c6445b0475_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections