xorist | c591cd50df539adbcb92ef5eff7a31bc_JaffaCakes118

General

Target
c591cd50df539adbcb92ef5eff7a31bc_JaffaCakes118
Size 12KB
Sample241205-des5qsvmhy
SHA256 b44285d766abe5e3bb069a07db26eb5bf10060aa987925c74adc3e33c5608cd6
MD5 c591cd50df539adbcb92ef5eff7a31bc
SHA1 999a4d2aa90c714a20d01d023f46dbf1f0f354b9
SHA512 7a3c9c2cbf0256edbd2e5a1b89916e2f826bd74aa6c5b2e8d486c166b418d797e888b9ebe061a9d597809677c194ffe3148271cf348acb3e0738c863b4bae57e
SSDEEP 192:e/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMGy:eebFNw4Pk1itKkpAjjI2YpdmGy
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xorist

Detected Xorist Ransomware 1 IoCs

resource	yara_rule
sample	family_xorist

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c591cd50df539adbcb92ef5eff7a31bc_JaffaCakes118

SHA256 b44285d766abe5e3bb069a07db26eb5bf10060aa987925c74adc3e33c5608cd6
MD5 c591cd50df539adbcb92ef5eff7a31bc
SHA1 999a4d2aa90c714a20d01d023f46dbf1f0f354b9
SHA512 7a3c9c2cbf0256edbd2e5a1b89916e2f826bd74aa6c5b2e8d486c166b418d797e888b9ebe061a9d597809677c194ffe3148271cf348acb3e0738c863b4bae57e
SSDEEP 192:e/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMGy:eebFNw4Pk1itKkpAjjI2YpdmGy
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

8657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths