General

  • Target

    f4c61dd3244e63b3a19d97a893e0cd60_JaffaCakes118

  • Size

    7KB

  • MD5

    f4c61dd3244e63b3a19d97a893e0cd60

  • SHA1

    9df83615080a3bda80f91135a4d345e8055be5e3

  • SHA256

    676903c100dc93681f6812043ad2c4b1481680d18dfe36e27ed21a052150a9f6

  • SHA512

    9ff12f990bf81d0b3896e47a60704400b1581056e40a47debac6115fe0d9e45731fb6e28774eac4d2108c242a2ee9b6d3d87c1c4458ed1a8fa60e91afccd06af

  • SSDEEP

    192:Ewzdrr1FG1WDCgmjPZLs8xqE/5eRGMUA:Ewprr1gkDCgS2kesMB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f4c61dd3244e63b3a19d97a893e0cd60_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections