General

  • Target

    71a135e0610b097e79fbdd4b2cf61d50_JaffaCakes118

  • Size

    7KB

  • MD5

    71a135e0610b097e79fbdd4b2cf61d50

  • SHA1

    56136f4d3ce97acdf810aad28c7538cde1a77737

  • SHA256

    98603717c3251dbcae14c114a42a67c2a02a1457d189af7607a881e719039c81

  • SHA512

    4c3dd12db86c0ea4516ec966f4f01bfbc9eeef75d60da9a73f05ded9e47af673f5ceeea18a5a43137147f1fc6c0a02d64e48be22719c535aa562380ced23affd

  • SSDEEP

    96:2eZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExLeGs5MVaj7jRmW+WEra:Dzdrr1FG1WDCgmjPZLpbwXM0QpMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 71a135e0610b097e79fbdd4b2cf61d50_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections