General

  • Target

    00dfc49ab32d630f793cb47637f5b877_JaffaCakes118

  • Size

    1.7MB

  • MD5

    00dfc49ab32d630f793cb47637f5b877

  • SHA1

    21c29c9bcd6c89104280f6ed7d7a003fc502e993

  • SHA256

    1f4c7bbf88a0c88c5f7560e82313ae3eeb45501f306011bc28cb04be07d1e7e4

  • SHA512

    78659ca41d2a02fab14e0aeb8e4d2f6f6e1dd856646a87ee3871db5c4f438502555ecbce35e8141c52f8cd478532439fc8f7b44e5e523cc3070d564de0554625

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKG:NABp

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00dfc49ab32d630f793cb47637f5b877_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections