General

  • Target

    0f67d91d3334d9bc31f42244a6c616c2_JaffaCakes118

  • Size

    1.5MB

  • MD5

    0f67d91d3334d9bc31f42244a6c616c2

  • SHA1

    b019a8a864ff702117361a6cc4993508c566052b

  • SHA256

    7f86e38507fe20a9e23edc1217af84e88317a5590920160ad4d8eb0c19f61fd7

  • SHA512

    9567b833fa239c639a288d7dde57277b44e0e7770f307790f8ed8f968108031a8ae031cf2a021b34bdb69311a8c6660b406bb0b18d6994a28175ff380f6b0787

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYsfLGrAvWWXkCV+1MKTbcMfHhGl:Lz071uv4BPMkibTIA5sf6r+WVc2HhG8Q

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f67d91d3334d9bc31f42244a6c616c2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections