General

  • Target

    b44f52909e5932c99cd3bdfc909c560e_JaffaCakes118

  • Size

    7KB

  • MD5

    b44f52909e5932c99cd3bdfc909c560e

  • SHA1

    4ca5bdfdf1bb59f67ecbd1bcdc2f8e768e72ef5c

  • SHA256

    d7171d7c2461bd3c47c480f6a1888e75af2d1122e54063038037ef6293069857

  • SHA512

    0c2c548cddbe230996970a1f18e9976c33977d4ca9013cfbb7375a09357728540dcd2b212d9488e7cd97ffaf5c4cd85a1ee55c2535a6819e7a02e26cac3ab30b

  • SSDEEP

    192:czdrr1FG1WDCgmjPZ9n/7AqE/5eRGMUA:cprr1gkDCgSfncvesMB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b44f52909e5932c99cd3bdfc909c560e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections