2026-09-21_5f0951db776e2aa0b47a97358a3d2f49_cryptolocker_elex
- IMPHASH 021d5e7849e90fdf4c65d3045c109483
- SHA256 c899e7d647ae39c47810b9a72ee24dac6768d651c5b013e088ac998f3ea03f66
-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=109, productName=VS2005 build 50727, version=50727,
count=31, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=96, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=58, productName=Unmarked objects (old),
count=1, id=120, productName=VS2005 build 50727, version=50727,