General

  • Target

    0c59fe9bfc98a59735c3f97088148f32_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0c59fe9bfc98a59735c3f97088148f32

  • SHA1

    fdb744335b06678a33f3dfd1c861d03c6dd80758

  • SHA256

    652eba0becd5b20ca09a2e455a507d870c1549aded57a36c4bf3300f5e89b9ca

  • SHA512

    564d67c5dbbb2f48ac0c7d7d89907ac32a1b05862eeac76b7d23bf1d06839ea7aa54bf4ef74aae6eed8dc37f6be069995de6adbb8c42de198b58e90aeebcd6fa

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UG:NAB1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c59fe9bfc98a59735c3f97088148f32_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections