General

  • Target

    da6d58d8bc92d4ec15df694d5b19a534_JaffaCakes118

  • Size

    59KB

  • MD5

    da6d58d8bc92d4ec15df694d5b19a534

  • SHA1

    13e5c37b3818042f7c75292df46ec316a06d979b

  • SHA256

    40081196bc2112140558f6ab16eef47b926aeb1fceb654eb6b73be300974ea37

  • SHA512

    74cef8724cc1ba0c528be0147f4d5e5ba7382a6ac94bfc3a0deacbe88231cfe7e109e5bc804f6eeae668081d0b57654f0dbfe7356f9094b3039027c78bb3141f

  • SSDEEP

    1536:8r4xKozKYkcfYFaT630yoxAkWJ50FE32THYi:8rczKYkhaKtFJP32

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • da6d58d8bc92d4ec15df694d5b19a534_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections