General

  • Target

    fca2d02c8af8a1084513c1b0f7078700_JaffaCakes118

  • Size

    7KB

  • MD5

    fca2d02c8af8a1084513c1b0f7078700

  • SHA1

    0fe92bb1476edf9c64b725711ecf9d6c6cb086c4

  • SHA256

    0e37bed0e9e55676ac240e7af67921175505f24cb2b56f13cb6dfd82c1d868b4

  • SHA512

    7106f795430cb92c55d00d0aebd600319c31b29730e061307d67594de661cdea950f5daad0187b21d20197e8c15454ccc22d847bd1334a473d78d2b297e1da92

  • SSDEEP

    96:liZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExriyFqzyfs/+GeZUeGMB:Uzdrr1FG1WDCgmjPZRYOE/5eRGMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fca2d02c8af8a1084513c1b0f7078700_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections