General

  • Target

    0e23d1a8ca65a4067e50718305cd8956_JaffaCakes118

  • Size

    7KB

  • MD5

    0e23d1a8ca65a4067e50718305cd8956

  • SHA1

    3d85d49bc151777e6553953dadd798fea00a8d15

  • SHA256

    d1caaaef83891f6d7b60a0acff4cea5fab6632942efef71dd8d53df07ec67211

  • SHA512

    83ff6076fe686313f5872371f3ca719d8fca460fca4f83e42c458b6644ae605bf7e36c0e7a9d9d473bcb86cda05c6c4953a493d79e0a5e9612e55e43389b9eba

  • SSDEEP

    192:Szdrr1FG1WDCgmjPZUy9mNIFM5wQGyMUA:Sprr1gkDCgSMIFMVXMB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e23d1a8ca65a4067e50718305cd8956_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections