General

  • Target

    00d79b7143df1bfade49f38855baf175_JaffaCakes118

  • Size

    1.9MB

  • MD5

    00d79b7143df1bfade49f38855baf175

  • SHA1

    9ded5dd2b8a75a31bb63850e2a6c30a6b687384d

  • SHA256

    ddcf3a550e5eafcff2ecb700982a3d7fb81a01545c62422307bd9df143a92dca

  • SHA512

    d9c15dbe03f2517e6fdfbf16aa36ca59e0bf42c9448c9c2192397a50e2e7bc75e71561b32865456e750e5ff1eaac53f82d9be4819e8ab1378a3ef175302707d8

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UL:NABY

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00d79b7143df1bfade49f38855baf175_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections