General

  • Target

    5d6dceb3c69916477702d55745524aa2_JaffaCakes118

  • Size

    2.1MB

  • MD5

    5d6dceb3c69916477702d55745524aa2

  • SHA1

    b54cafb2e39006bf154659937d8cfd99725b4f94

  • SHA256

    e397d0bb5569d854be0f7d02dc71c8be1a4abd726dd29c0409d578584a8b03d9

  • SHA512

    0d0d35ed1b07faeb7c9a3ababd3c6c5ac43a97b81dd5e723be4e81be729612503e5b7325c7e0acdf110c2e5cb19d5fdb748420356f640ffb930bf33a040cae6d

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHaf+:NABl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d6dceb3c69916477702d55745524aa2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections