General

  • Target

    f43b63c2e5350f4a570104a3d19d6010_JaffaCakes118

  • Size

    7KB

  • MD5

    f43b63c2e5350f4a570104a3d19d6010

  • SHA1

    a486b03109ce800a2e450175c7fdf2a79c91db30

  • SHA256

    1301ecefff971eadb0f8d97945fb14f7d9eb6420c33f92a1ef1e6edacd7a1ec4

  • SHA512

    fdba4023cd3b5dddf83be31ff7a7d86da2fddb65c3e14c8f1ec2f1a68861d343fc4be2cbfa0c1c0db69d3e73d361f39f1e6a838d8a9ea2c4424cc7a65fa22694

  • SSDEEP

    96:G7Zhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExFUfpmgZaDPw0mR7Dkxv:uzdrr1FG1WDCgmjPZmmgZaD/6kUfMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f43b63c2e5350f4a570104a3d19d6010_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections