General

  • Target

    040d31fee8dc69b4c0585494696d4a50_JaffaCakes118

  • Size

    7KB

  • MD5

    040d31fee8dc69b4c0585494696d4a50

  • SHA1

    9434a9b4f3e17a66de0ca3f7c1fd4d5e88ddc188

  • SHA256

    dfac10c147ca8ab81e46a81fe46e874f13894cf121a9cc67e2df4f3b64614ab3

  • SHA512

    ee18c862771ce6ca126bf33e701fac2a2281e17fe550f31f8352ac20137a9744ee9e96007007d8a5f1dccb034e61b17b83a015752c2da0a16635f24f974125ca

  • SSDEEP

    96:FpLZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihEx1TaCy4oTQeINBXlqfi:zzdrr1FG1WDCgmjPZ1kANVl05MUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 040d31fee8dc69b4c0585494696d4a50_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections