2026-07-27_fb9d65dcd811c6f4ebdb76a18e8d54b7_cryptolocker_elex
- IMPHASH 021d5e7849e90fdf4c65d3045c109483
- SHA256 c7ee3f59bfff76d7846b302d6ed18b728e846a4e37f2f8aaac8ba3dbcf05a942
-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=109, productName=VS2005 build 50727, version=50727,
count=31, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=96, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=58, productName=Unmarked objects (old),
count=1, id=120, productName=VS2005 build 50727, version=50727,