General

  • Target

    6afc9ef212bace7ccafe1832cb1cc812_JaffaCakes118

  • Size

    69KB

  • MD5

    6afc9ef212bace7ccafe1832cb1cc812

  • SHA1

    1d8b9093a70e37233d71f31d6787edf8324d475f

  • SHA256

    e6acd52fed1ec9c49673348d152d9b84a2f06614ca75b20feb2939804f04a521

  • SHA512

    2809b78ce5115573ea8a9f6b23547723f55b4c672ceae4d0353081d5bcd05d6061e51df814e0366f9435bebbb0f10a8a4e3a567ee86a6ff7c3cf122a64703647

  • SSDEEP

    1536:5r4/tfLJmXzHPl9DqBLP2cY2z2MOjpsh:5rG6r42Mq

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6afc9ef212bace7ccafe1832cb1cc812_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections