SophosLabs has provided an in-depth look at this ransomware and its unusual file encryption: it skips files smaller than 8,192 bytes, and starts encrypting larger files after the first 8,192 bytes.