General

  • Target

    27891e270e832de9e84d9907c9d2a884_JaffaCakes118

  • Size

    22KB

  • MD5

    27891e270e832de9e84d9907c9d2a884

  • SHA1

    ae3449f10e0072b4c92f137ff9bc55e5aa1c38ec

  • SHA256

    f9bc5fb2c173d461e77d3f46914cb4c8c99d679e08023f7a9cfb4ad246f8391d

  • SHA512

    53d1464ecc9da927231865131fbd5d5becec37027d5a1cd0faa8a4f7d2014d41f756d97a067bbd5ae67daa04c55b8b406e1d968f94f96c6334150ec96694c55e

  • SSDEEP

    384:Pprr1gkDCgSBoCqgU7fffTffsxajTdZzuXJe1DAB:prVDCRol7fffTffRZzul

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 27891e270e832de9e84d9907c9d2a884_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections