General

  • Target

    00b9d697056cad7df626281067d3ee50_JaffaCakes118

  • Size

    2.2MB

  • MD5

    00b9d697056cad7df626281067d3ee50

  • SHA1

    33e42c31474d7123af4d8084f5239339a72fa5ee

  • SHA256

    afb3c844380e06498871ff03506663ad05f7434955580d9765a9c94ec6ea90b0

  • SHA512

    f9c4147a6cfbf9efc95052f0b2cc1e2d10d228150be07c7f8d5c4133d5485f0f27ff62a20f4bdf1e7afc68e538c8b674efd4a005e2e325c00a486918449d90ec

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cvMF:NABO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00b9d697056cad7df626281067d3ee50_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections