2026-07-30_5efbd8470aeedf879fd23b9eb0dfef5e_cryptolocker_elex
- IMPHASH 021d5e7849e90fdf4c65d3045c109483
- SHA256 368372d4e0478cb822bce1d6160c647e6a8f01c17cd073d3bf4b30caf8f5051c
-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=109, productName=VS2005 build 50727, version=50727,
count=31, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=96, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=58, productName=Unmarked objects (old),
count=1, id=120, productName=VS2005 build 50727, version=50727,