General

  • Target

    fa9b0ea2a95994db670cbc48ad8950f0_JaffaCakes118

  • Size

    7KB

  • MD5

    fa9b0ea2a95994db670cbc48ad8950f0

  • SHA1

    7e3f8508ec67f803cd1f9e15bc8c8c279b21f390

  • SHA256

    0c0ff95514551f553178466a65b8ddbd23455bd2d275b35fb66004b124bf1280

  • SHA512

    481ec204b6bf790dc6b712538927fb4c630a9363b1b989cbbdcc0e6c19ed6cf6f4fa097d6e897c14814762775591746e7522b81660d0c33607843f01e4a847db

  • SSDEEP

    192:+zdrr1FG1WDCgmjPZCdIDFSxKgV9JaMUA:+prr1gkDCgShp7gV90MB

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa9b0ea2a95994db670cbc48ad8950f0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections