General

  • Target

    c777c39aa89562d749c232c53baa5b47_JaffaCakes118

  • Size

    7KB

  • MD5

    c777c39aa89562d749c232c53baa5b47

  • SHA1

    45861a873bf82a97ed122680a33d80d17437f51b

  • SHA256

    888e8c884608c66d3b71bd2440ee643f6fc8b416d63e4d3a79a614c6203abc58

  • SHA512

    bf51be15f0d8c36011af9ce834f22b3682401ece3d637c57f8983ee1c9bd535ec4bc20f0f7cc7724f7e92be12cbc28843c0f4e6fff1ce72116617ec23305b936

  • SSDEEP

    96:WdZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihEx1kUqhx/qMUA:Ezdrr1FG1WDCgmjPZSx/qMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c777c39aa89562d749c232c53baa5b47_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections