General

  • Target

    bdd5ccf77ee8b5ce2b00c50f5b2c0910_JaffaCakes118

  • Size

    116KB

  • MD5

    bdd5ccf77ee8b5ce2b00c50f5b2c0910

  • SHA1

    8ef2108c1c4756a5686618d280851aec77b6c0f1

  • SHA256

    056f76a1e2ed80c2dd1f4244a58b596350401aac3074320ea23e6da2aca0a78d

  • SHA512

    978e00bad5550c0c6997ebb6affbb9018920c7a55174071873809f40a3fab84b8b7c469f772f4d02de01f3d032d768197af39670fd5c52380f5a530ad3603000

  • SSDEEP

    1536:ar4k+OoUPdn5a6r+f57thh3hPhGhxlqJZ1h+yOuOlXc5FbCpKYykhlSt8cuWDUaQ:arZV5a3lpY/7St8c97wFwe

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bdd5ccf77ee8b5ce2b00c50f5b2c0910_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections