General

  • Target

    0fe9aea31913d392769cc6bf40d2af61_JaffaCakes118

  • Size

    7KB

  • MD5

    0fe9aea31913d392769cc6bf40d2af61

  • SHA1

    6caf7328e9abb5ce35dc7a4b3eb39726165f9877

  • SHA256

    c63f9786d11b2dfa7d35f79dfe5001990d64ac9ba78a661048c8823eeb2635a5

  • SHA512

    c6c617c069696ffb1e0d8c1381de90deac18ad6551e8ad864a32747d5e065e6054d2bcdf96769bb33c1728402b760abfb70a414ff4ee52aa4aea8182556aa65d

  • SSDEEP

    96:V4Zhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihEx5ZWznr1x+V4peJSpNMB:Ozdrr1FG1WDCgmjPZ+zn5criNMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fe9aea31913d392769cc6bf40d2af61_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections