General

  • Target

    f68315e570819c3d18ef132ffc231242_JaffaCakes118

  • Size

    209KB

  • MD5

    f68315e570819c3d18ef132ffc231242

  • SHA1

    fb55b76cda3d3bbe60ecde74aa6a1a7be22a1a9a

  • SHA256

    11ec85d272608f8881938b99dbb33bf50ba28c73792bdd1c09a916807c2ee832

  • SHA512

    d2c8408925272720c9f64eb28f3e9c872ca075e354d7cef66ae1f6e44468824ee63f7aea4cbf47381816bb50755f57ed7fa34e2118bd501daca4a3ddb03c7cc8

  • SSDEEP

    6144:XQEOMq8yymOlLq0cxiz1oIF6RAN7d3lnPL:XsMq8gOU08MeCNNJ3h

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 2 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f68315e570819c3d18ef132ffc231242_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections