General

  • Target

    036f35eca84cbd3142d96eec5236ad24_JaffaCakes118

  • Size

    1.6MB

  • MD5

    036f35eca84cbd3142d96eec5236ad24

  • SHA1

    f8ce5776592e5d6a5e575d85f16fc41c6bb7dadb

  • SHA256

    5ebc6712761d3472cbd1b592f5da65769cf69d1eea9a8e6d14e2d77b974c9869

  • SHA512

    7a4746530a7bb14d0985b0a31e1f09663650aedf3469c5fd334f37e76d9dee7fb8747f53e4d0c9837774e0cf95fae0c718f8524a062b42a29ac8921dbb3e40d0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VxxTNUUWy5/hJr0M:Lz071uv4BPMkibTIA5CJ3hUAhJr0M

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 036f35eca84cbd3142d96eec5236ad24_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections