General

  • Target

    01397ef25854a9d6ddf2c2fef8d61125_JaffaCakes118

  • Size

    1.1MB

  • MD5

    01397ef25854a9d6ddf2c2fef8d61125

  • SHA1

    0fca890a6dd0379f4b19067dbdd9619d499dd9f8

  • SHA256

    5e0906c3fbc575483a81b0f4adadcf0de08c993ce0fe511a63d62a7a92cd36f2

  • SHA512

    697d01e705b30363cc131067f351db21d898b9faf177067f7a2e3f96842586f572cb5355399983af62ba9f03263739151c7580819e454e217485d8a651e882a3

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNukZ:knw9oUUEEDl37jcquVoVJtu

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01397ef25854a9d6ddf2c2fef8d61125_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections