General

  • Target

    026c928e0e950ff8918429b70da11216_JaffaCakes118

  • Size

    7KB

  • MD5

    026c928e0e950ff8918429b70da11216

  • SHA1

    4f1c38dc42dc65a35428df7ebe90ad94f5daa2bb

  • SHA256

    5f8cbaafe10f4a87a10044b42fbeca780cd901b09a0fa7f2909c2f2276586647

  • SHA512

    c3bbac4cffbf65e5e885b65457f13f71dc4d5bd04fddb0be05648709914b4858e929b9d3a174ee706411347e328b093c2b2a23d7d5e23d6f520d17d683d85cbe

  • SSDEEP

    96:lhZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExJxjDXV6TLIQi9z+LRMB:rzdrr1FG1WDCgmjPZbDF6Tlgz2RMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 026c928e0e950ff8918429b70da11216_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections