General

  • Target

    cfbc736d5a16198f13e7bf360e5004be_JaffaCakes118

  • Size

    7KB

  • MD5

    cfbc736d5a16198f13e7bf360e5004be

  • SHA1

    4aea5ace463590c5c2bd1cc571851e5e630d9331

  • SHA256

    397009cf4ffa0f080835f9f2a43e50fbd91bd57763851a280a75aff029a7034c

  • SHA512

    59a51ab1bcc070ae20e385e56ba2d0afe9e4ee6088cfe06e1de9c0d33cb4afe6ca55a92f6d137209b0cbf4a19eb2601ea4085e40e0a5d1e224e1993350d604ab

  • SSDEEP

    192:Gzdrr1FG1WDCgmjPZPx2ds9ct1X0utLRMUA:Gprr1gkDCgSCd6ct+gFMB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cfbc736d5a16198f13e7bf360e5004be_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections