General

  • Target

    3a0b457bcc003535ad574b8e30551560_JaffaCakes118

  • Size

    5KB

  • MD5

    3a0b457bcc003535ad574b8e30551560

  • SHA1

    29d8c79d0eba47b438eaabad6147b08897e69161

  • SHA256

    851acf9033cda4a21c34e5143b3aa9a9b9f57943d410744791dfb775b009b2a4

  • SHA512

    7b0617eeb0c703f93487f7ef41d69d36b7aaa8e6018353305885aaebeabbc4ed68a745f66d4d403cac6c542c946843e80c813ea5e7b2d20cb0eab1f7960f3287

  • SSDEEP

    96:DZ7sjLYBOTKQTxvJpkWuIwkEeftR12sMPjY+zzjWfYM/EiuBvLHzvci:Ai3QlvLLuIwalr2s76zjWQM8iuBTHQi

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a0b457bcc003535ad574b8e30551560_JaffaCakes118
    .rar
  • m6HmvgGVrmgeaD5.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections