General

  • Target

    00ef04b9c67b6584b93b303d97db1b1b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    00ef04b9c67b6584b93b303d97db1b1b

  • SHA1

    42685abae61304501168087c0ec6d6e30006b559

  • SHA256

    8a7502d528e63b10570b74db6e983f5119e6750483c1f82cb36afe717c8044ad

  • SHA512

    0af8d933ab8b7cce17fef6677d16f17b6b8b19890d728386011a44a3040fa2abdadab9f0584544eb61d84b2b3458981b519891cc60e2fdf368c66229df4e2021

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfY:NABN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00ef04b9c67b6584b93b303d97db1b1b_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections