General

  • Target

    ebca89c07e65029da85ecbbf4a6d3e0c_JaffaCakes118

  • Size

    401KB

  • MD5

    ebca89c07e65029da85ecbbf4a6d3e0c

  • SHA1

    729eff4cb8efd00072c1876491d359de71b27e3e

  • SHA256

    1d773d866966940f042d442b9e0cec638e733a83f7137cbdd4e70d4cb9803ada

  • SHA512

    1385ce3ed11ffa54a203baada1888fbc0603074139bb1b9b637e29a1df2fb89ec98c64477eeb71959f6e524e0c3c313f42555b296c0e6855e3cc5ddb7d399f53

  • SSDEEP

    12288:JOSzKmbt2q+jraSEjcH9m38srBvbvKSRc:4m/N++Am3vVvt

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ebca89c07e65029da85ecbbf4a6d3e0c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections