General

  • Target

    fea4dabc25315edf52a540b1a7faf348_JaffaCakes118

  • Size

    13KB

  • MD5

    fea4dabc25315edf52a540b1a7faf348

  • SHA1

    86c9e97b498264f8a6f2c3647126f912df2a7eab

  • SHA256

    9d5cbfa2da9a2a98b99a08a0b97d4136656871af15a40dd13dacbd01380448d1

  • SHA512

    0ec8a60abdd22e3a966e091579289f2e5d36ec5535fd2704020e845a8a04e6cd4b74a25f59405aa574e192149e572ab25279a569f557a2c847dcc249fae81eaf

  • SSDEEP

    384:abeRWGOUNBkIcfwiHgPBH+PZioY6UXRB:EyPOUNKIcfwic+PZio0

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fea4dabc25315edf52a540b1a7faf348_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections