General

  • Target

    0d3db8fc7b4e9c299e613cdf2809e840_JaffaCakes118

  • Size

    40KB

  • MD5

    0d3db8fc7b4e9c299e613cdf2809e840

  • SHA1

    53d4fe38e838e009dc0bbde5209be3d939059894

  • SHA256

    bb2af509e0c550876fcc7b44b052f9fd9e76a872dfbdd5c9ea987fc9fa335a9f

  • SHA512

    65d0b9fcd86afa1dc354599c53b78be7b28b7c0450a53b2a7d43e6ad35971846ab82c75bb654015e72ba19562a60063edf68c864c55dcc3d6355f7ae30f7068e

  • SSDEEP

    384:BebFNw4Pk1itKkpAjjalrU5BrJEqYvjS7kDCgSl8HXMB:B0FmBkpKj7BY77DC1ek

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d3db8fc7b4e9c299e613cdf2809e840_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections