General

  • Target

    00de58cbe441c6ef13029f9914f1d7a4_JaffaCakes118

  • Size

    1.7MB

  • MD5

    00de58cbe441c6ef13029f9914f1d7a4

  • SHA1

    3cbf1a8c3fe7f228077acfa7a6b0bd83e225fa61

  • SHA256

    c949f296097724d058556a3a7b9df0c4f7b4f5415bfb43220dc54edb07079d28

  • SHA512

    707d075630754146236123a16bdf1f0d043c4d0fc7251c10ac717860bac2104f3f6583566edb0157eb9f52e681ffb5e7f7fafafad160efc6873641580008fdec

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgU7yf:NABc

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00de58cbe441c6ef13029f9914f1d7a4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections