General

  • Target

    00f5cb0ca4993e9ed8d0ee964c4a63d6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    00f5cb0ca4993e9ed8d0ee964c4a63d6

  • SHA1

    c68224543f794f0d32792339d786ec5867e05c02

  • SHA256

    00cddc9fc03c82bdfe14f87ce81b0bbfb0580e93f9009a28d181cd3d853a4b15

  • SHA512

    2cb39db0ad3c5efdc3f5efff7f8c4c7db4ee2570a123df84139d584161d41fdd7490161fe6a9fe9b5cea3a9b89e580ed5e04d0676909e264a5abddc5ab56cf1e

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfz:NABu

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00f5cb0ca4993e9ed8d0ee964c4a63d6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections