General

  • Target

    05e97a579a3c08f9d3f86baba89e0f62_JaffaCakes118

  • Size

    1.8MB

  • MD5

    05e97a579a3c08f9d3f86baba89e0f62

  • SHA1

    f2c15caad315fc09d8cd56fd560452f9f4b6fda3

  • SHA256

    79726a07c309315a544d0bafc25001f6ec4c3195b37a16ebb5d90d797f9ed457

  • SHA512

    ff59bbae26be4e6bc83cef44e68432422c83fc8bd8a2c5fab7e4551858381a9accb071b0b91b08ffb6646a9ed7ef194224e170b81d044ab0e7d7c11967e68b63

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlN:NAB4

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05e97a579a3c08f9d3f86baba89e0f62_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections