General

  • Target

    006214bc9f398a869f3558390044ff20_JaffaCakes118

  • Size

    2.3MB

  • MD5

    006214bc9f398a869f3558390044ff20

  • SHA1

    5649d40951765a947b9eeaf531b65430996e44a4

  • SHA256

    712cca426264a79cc461fc3b7922f2b0499f303e1217318f88db834058878145

  • SHA512

    e7ec0bb784c9bd700f3cd88c7c53f62b729f20982df7ea73ce7079c9653f0e86bf5968f695c4441df79f9a18c04b19fdb2719476c1a7770e59d13e92a11bfb04

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aDiJ:NABB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 006214bc9f398a869f3558390044ff20_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections