General

  • Target

    0bf1b35f39bf00e79856c8ccd2d96d73_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0bf1b35f39bf00e79856c8ccd2d96d73

  • SHA1

    14e2c17d293e0886463dd5de6ae792881e114229

  • SHA256

    be7f99efc6ba0a51c12ffa29a00ac113f2cfae9ae91f3cb0be637386a9974543

  • SHA512

    aa0840e65c7db4f94d2c2367a5027a44836ff08b02eda7599bb1b139303a4b9664f554a98896b3b71ffb217ac7f25df7475a5817f04469ad75dfb2267348c3c0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfWe:NAB6

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bf1b35f39bf00e79856c8ccd2d96d73_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections