General

  • Target

    00b5dda0b64813612e01fd64bf7e5d70_JaffaCakes118

  • Size

    1.2MB

  • MD5

    00b5dda0b64813612e01fd64bf7e5d70

  • SHA1

    e6b987c8796bf2af12ad8e808b82c57d9389f173

  • SHA256

    36f02c3c1f96dd0c98566778a0a86eda7f263949c5eae47cd0382e1e3a8f71d4

  • SHA512

    686c82430633f69eabb131e35fe21fcab1ce5ff8741d9471e5ebdaf1827db2af0de209da796ba6b162c9d1be9f012aebe3326becb90ffeea4207a630f82b3b5c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCGiApC75UC8DDPmKt:knw9oUUEEDlGUrGiAgZ83x

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00b5dda0b64813612e01fd64bf7e5d70_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections