General

  • Target

    20edc5b6ec17558d46853bd4bfadc69b_JaffaCakes118

  • Size

    165KB

  • MD5

    20edc5b6ec17558d46853bd4bfadc69b

  • SHA1

    3689bdf4ad7163ad1e876e312cf807ba1c5f1ff7

  • SHA256

    b0ff77903804ee3d866b81ff8b94be59dad33721475d56812da9e9850beadfba

  • SHA512

    bf8c52c7da40c93ec388846745ed5d1603f3712b9b1d6fe2960aaacb89270995a16514b82d0956f0954747cc15f832162fe03ece56fcd6c18b1d01e41410dedd

  • SSDEEP

    3072:Tr0zyJStHyynWJs4JrboEjTdrqwGDSSF3+LTNt9NKJKIX:T4UStSyWjvBqwGXqNt9Niv

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20edc5b6ec17558d46853bd4bfadc69b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections