General

  • Target

    2ee7e57e5a8a6d1924af950af8eb6cd0_JaffaCakes118

  • Size

    318KB

  • MD5

    2ee7e57e5a8a6d1924af950af8eb6cd0

  • SHA1

    05d777a1148bc27794aa8380200be257f7f30c12

  • SHA256

    f3299275739be51696747d6dc00495487d5ec6ae3715403d94c0f6d01d200d8f

  • SHA512

    0dec4b6b4b1f98616d2561f39332977e512e3081044007208219d31cdd94259efd7c29be0b63c243dde62be63fc93018ea5785998c9e859a5ea9d4e64aa3884d

  • SSDEEP

    6144:NOJGPwedDE+EcIIUZYBwE57MynHkrAlHKNIBQrtf/EuZtS2Ejga2SWH:NOJaNdDEvIVwEpRHkr8soef/EuZtS2EO

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ee7e57e5a8a6d1924af950af8eb6cd0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections