General

  • Target

    a285e1529b2c97577e6f8b4507e745c8_JaffaCakes118

  • Size

    7KB

  • MD5

    a285e1529b2c97577e6f8b4507e745c8

  • SHA1

    d4291f7ecb371beb3ac0c35876b68156aac392f8

  • SHA256

    8562e60178ec470e8147d73130a93f2f568264048685dfc8a6258ac79f96d143

  • SHA512

    164c1529b3c9fb973013c37de9581c4d1aeacfa93314bffaf4d9de1341b187717da248e1e68b5907ed98c9f8c7fb84062610451e3c1d7d7930c6f746c5d96cdf

  • SSDEEP

    192:Ozdrr1FG1WDCgmjPZY/mPaT7EWf7lK8hU0MUA:Oprr1gkDCgSeuyvdlK8hPMB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a285e1529b2c97577e6f8b4507e745c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections