General

  • Target

    213f47b45bb43ae501a57bb65ea621c8_JaffaCakes118

  • Size

    2.3MB

  • MD5

    213f47b45bb43ae501a57bb65ea621c8

  • SHA1

    00814cb01110a67f6f47d530a7f18e97b83e4452

  • SHA256

    7b3d099757b7b10282c3c285d8f7c4fe0aa7bef50267b6ec3846362143e5ddec

  • SHA512

    1c8dc83e534fb7a2ce883cbf32d35429de98a1ca5fd4b08642a91314cfcd060cfe177bcefccf6754df7c8668d37dcc71f7d4df893e33a8f2f095d8c85acf4c1c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aDig:NABI

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 213f47b45bb43ae501a57bb65ea621c8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections