General

  • Target

    1b3eb710de5103bfc386ad9c59d8850f_JaffaCakes118

  • Size

    7KB

  • MD5

    1b3eb710de5103bfc386ad9c59d8850f

  • SHA1

    1f620726d002c1d8d77faba9cb73193db5f9c9f5

  • SHA256

    d042f6a6594c0bd38678ada6a56304930bbc4df71ba6c66487715c20e5859582

  • SHA512

    af0d792ab8a541474faf37bbe23538fb65c6f8a4e1c48cd8f50f3f198c3dd33102326ea834132c01695a5c4f23afff9a03ce11fefa17bd8775562bc16e39afd2

  • SSDEEP

    192:qzdrr1FG1WDCgmjPZzeEk0BTlg+O9MUA:qprr1gkDCgSEEk0BG+0MB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b3eb710de5103bfc386ad9c59d8850f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections