General

  • Target

    5b8a07d4d891c996d088a41a04bf9dd5_JaffaCakes118

  • Size

    7KB

  • MD5

    5b8a07d4d891c996d088a41a04bf9dd5

  • SHA1

    8a812bc22eeb96c6252006480613b04793a62b36

  • SHA256

    d0f0f1cb764de7a366baa6a5dd8fb330557728e95f8c31e8a90d749983f5983b

  • SHA512

    596ec5a51e01b75e23580c0428fb756744829c51fc586d27be87036ac00f49e94a5c11d97f8bc57dfb2a150fba30e5dd8b795c552d8fb02bf686214dfb613e83

  • SSDEEP

    96:W+KZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExNm/PuaVAnPmaMUA:2zdrr1FG1WDCgmjPZN3aVAPmaMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b8a07d4d891c996d088a41a04bf9dd5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections