General

  • Target

    002589b7078b7395f7b1e23f52c4d499_JaffaCakes118

  • Size

    2.9MB

  • MD5

    002589b7078b7395f7b1e23f52c4d499

  • SHA1

    d25eb66361b6a9ee5a1cf53b331b7fed777fe08d

  • SHA256

    8987cf2472e0a64c6adff3cf4ad6b7e3c19f5e732a22a5b4cd14f93d7ec9cdc2

  • SHA512

    d75d35d61b5f565c7c889123fa67ec390e0bf7946e45162d3093bd62e8b98ab33a93ffdc1ff449315a67fca2a3794c9b225773a178381f412de86446e56e3505

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5V+J1K7O/9:NABm

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 002589b7078b7395f7b1e23f52c4d499_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections