General

  • Target

    0594eb886f72d75eac10279f79e666a6_JaffaCakes118

  • Size

    2.8MB

  • MD5

    0594eb886f72d75eac10279f79e666a6

  • SHA1

    23bf89bc05894a4cebe4ebcd95dead652285c164

  • SHA256

    f8031f872b6ff16c83b4d7830f74740d25824c4d003209728e9412315bd8b903

  • SHA512

    444e0495936899cdc06557575ef1ad58b5eb123fa173030064b68d1ce0b4bcb7dce7158e2e6e6786e55936bfb9b7403666ff2c62d8a6b7d1e8cb33a3e4a23123

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cQedCS:NABr

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0594eb886f72d75eac10279f79e666a6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections