General

  • Target

    61797409f8b005b6cacf5e59851b5dbe_JaffaCakes118

  • Size

    91KB

  • MD5

    61797409f8b005b6cacf5e59851b5dbe

  • SHA1

    5536bd41d054abbdbc40610d6a0a136243e08cc7

  • SHA256

    c141071bbe9887987205704086574b923a8f9d1197458e7298025d0c8dd2d36e

  • SHA512

    4fa58c509459edd2b29c17c8a7906c00d2fdef33383495ff908ac8aa08e189d4e0f883b03efab281dbb24b7103dea9c88b64900f3f3e3aebbe31a73f182d668d

  • SSDEEP

    1536:rr4NzX0Xt75M2V2f+ffGQzRbtFO8616Cs:rriEd75M2V2fS+QtbtG

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61797409f8b005b6cacf5e59851b5dbe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections