2026-06-27_9f9565b5c6da20dd924a7d36724abc76_cryptolocker_elex
- IMPHASH 021d5e7849e90fdf4c65d3045c109483
- SHA256 54f3a8e222237514c8ee6f6a53064f51a73c1fc5ef87cf7ec4937aac429c5f0a
-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=109, productName=VS2005 build 50727, version=50727,
count=31, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=96, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=58, productName=Unmarked objects (old),
count=1, id=120, productName=VS2005 build 50727, version=50727,