2026-10-08_07a488c2a867d06cd7b402d74f1a8cfc_cryptolocker_elex
- IMPHASH 021d5e7849e90fdf4c65d3045c109483
- SHA256 6c3c6a26d6ef40358a69160573e10c4c8ce8152a6fb720928e1ba200dc4e6dd2
-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=109, productName=VS2005 build 50727, version=50727,
count=31, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=96, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=58, productName=Unmarked objects (old),
count=1, id=120, productName=VS2005 build 50727, version=50727,