General

  • Target

    1fa9fb0bb12d82d8bf1ca45948f83336_JaffaCakes118

  • Size

    2.2MB

  • MD5

    1fa9fb0bb12d82d8bf1ca45948f83336

  • SHA1

    79026b56e9e4b7c4a04e95b9c19f4e9c26c87d8a

  • SHA256

    291152018db66440b23682cff7c4e3ea8dc3026caa20fb7777661bbb81c703bf

  • SHA512

    3fd2009d4c178fd3e85c9228b5a3ac2929e84877293db75fb7e70ec10926f04f54b6a2f193a58fe5de4a9ae92648e009bdccd87727c1ca4d1bec1f3ebb089db1

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfUO:NABU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fa9fb0bb12d82d8bf1ca45948f83336_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections