General

  • Target

    1ff307d42cfb1fa4727bb4389cc9bdf4_JaffaCakes118

  • Size

    1.4MB

  • MD5

    1ff307d42cfb1fa4727bb4389cc9bdf4

  • SHA1

    71432c9e208a4d441abfe8bce2b8b8d299331c97

  • SHA256

    6221c8e188ebf95bf49b1a77a97190dda676f272598ef42b8631063101e125b2

  • SHA512

    d91161eef1116f46c4017f6b2ebf1ef824999d174ebd89a0c657a0eeb808f3888bf3db3c4ab8bab2e27866aea582d7e7488a4d188cb7aebb631188fd7e3c83b6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNQeEVIuj8qBChqlkJn5RJu:knw9oUUEEDl37jcquVoVJ31CMr05S

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ff307d42cfb1fa4727bb4389cc9bdf4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections