General

  • Target

    0e78279f26c1d40fca00e68e35fae457_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0e78279f26c1d40fca00e68e35fae457

  • SHA1

    fa403ee7ad68c3c097e2180077398384b1ec5af9

  • SHA256

    fffd92e799799e822cbb959d976e1834058e6e1c7d34d47771f57dfc3061664a

  • SHA512

    aaafb84cff16618f17076f63358108a0be943f9740e06f66e54101e3d1221f61ce91379eaaed3e9c36ef900227b0a998c8447bf3d1c4a1bb7e84b916a94b5c49

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pO6:NABl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e78279f26c1d40fca00e68e35fae457_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections