General

  • Target

    bdf4b45b79f51b912c6d4bc0bddb1d05_JaffaCakes118

  • Size

    94KB

  • MD5

    bdf4b45b79f51b912c6d4bc0bddb1d05

  • SHA1

    543b673e22bcb465fc6e0a957c359bd573244d71

  • SHA256

    87dcfd522eef81f58e0b18db800cdd28562ba537f1d00bb48658c21e68521a63

  • SHA512

    fdfda6bb4de2b81cd3dc9870d74adf5bab67a756dbefc5b132bf189e10db4c827cbbb3c7dd4cfaf7870aeb71fae6729ffe85cb3b8eeed1d4a82bf454b7f5d728

  • SSDEEP

    1536:aPOUQrHbMsZM/ugmK82XqcTc5BkUXO6X/1qV/ZjxgHpByhbBiduD8RRYzZI05:tUQ/MsZ4B99XqcgDVvWgnZkD+yzZH5

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bdf4b45b79f51b912c6d4bc0bddb1d05_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections