General

  • Target

    0e2b1f1c0abb115f4514a05212a20233_JaffaCakes118

  • Size

    7KB

  • MD5

    0e2b1f1c0abb115f4514a05212a20233

  • SHA1

    afe35725bb3e6dfaff5db8335d017ebafecb94f3

  • SHA256

    46dd728e76fac2aa1abe753493026a5e2fcc4a9c879a33aab43d3c887649aac2

  • SHA512

    3f840cb63c67cd1a14c2376438420e70531e85c26021b9315910c4f409a7ac8bafb7b54b36b2a6d9c63e8e1e65922637e3319cdddf2fd33209e4c644dafd1b0b

  • SSDEEP

    192:zzdrr1FG1WDCgmjPZvoAYmpiE/5eb2MUA:zprr1gkDCgSlVXeiMB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e2b1f1c0abb115f4514a05212a20233_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections