General

  • Target

    0f6e606bc0e8ccf8415842012d591571_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0f6e606bc0e8ccf8415842012d591571

  • SHA1

    3d54de0243e7a683822cafec8b1d13e76033e2e3

  • SHA256

    15e9f95aca275bf9507a9287497a33d54c9ed800f9935348cb37408792ac1f51

  • SHA512

    4ee37152d0a3a8b4d2c128d0df9f7f170cff7e5b46b5652fc98598c22b5cf4d95dbba66832e72a341b162c269b24555f0ffad224c608d05e23e999ab5b76ca97

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qr8+Px:NABy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f6e606bc0e8ccf8415842012d591571_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections