General

  • Target

    31b39332874eca4bca19319073c479e2_JaffaCakes118

  • Size

    7KB

  • MD5

    31b39332874eca4bca19319073c479e2

  • SHA1

    2038839be53dc9ef2d3981d2ddbfb8ff5cfb2eaf

  • SHA256

    5777ba5324a693756b82284f7388e8b57a8ee3f014cf09b9127c9db06269604a

  • SHA512

    8347c8b63d03d1248e1b505ca171837a0a73237183b14ab2044336013c06cc0cc8f651baf33b5009b4411ad40000e89e423463f3f7192e5a69e5ed388b13c301

  • SSDEEP

    96:FHZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExs3aWOjj7jRmW+1xSqMB:9zdrr1FG1WDCgmjPZs3TgXMlSqMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 31b39332874eca4bca19319073c479e2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections