General

  • Target

    00b59e77a8e94aadf2e423f193732654_JaffaCakes118

  • Size

    2.9MB

  • MD5

    00b59e77a8e94aadf2e423f193732654

  • SHA1

    17b9a5d9235812abf8847298602b94fb8dc41839

  • SHA256

    de71e3a90c3ffe14416542e9c8c753c53339af84c6181eba008aafdea49bdb37

  • SHA512

    32fa632385fe248b0c6d75b96a713f3b5544137abc2f5c690c76f30a02d1b70a851e98ada20bdb33edd3dc1ef4a3c2bb23b140cab91b683a531cc81f8d44054f

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/Mvcs:NABl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00b59e77a8e94aadf2e423f193732654_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections