General

  • Target

    fbf6f0be2067e43df0db034583fe7279_JaffaCakes118

  • Size

    695KB

  • MD5

    fbf6f0be2067e43df0db034583fe7279

  • SHA1

    84185361c0d8779b797d7f40915ac8758241e1cf

  • SHA256

    0f2a4960f112cdaf87717f4707b395c911c91ddff03ef4f4ca19bcaa979ce704

  • SHA512

    137926c8bf30cd898381f5f20d550409ea232ec8e3b178afed8a6fb55fdbf5a43db6b7f0fa5d8ff3b8cb34300cb0ccef1f9da415a542aaf8e174055836272e17

  • SSDEEP

    12288:DVyPc0qu9mc7QCBSOyeJgJANHl7nZWBb+wM8hiKCKEP010ep0aflV54zpLK0Iyj:JyrmM2ydDZUb+wiKCKENratD4zpx

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fbf6f0be2067e43df0db034583fe7279_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .rsrc/0/MANIFEST/1
    .xml
  • .rsrc/1033/GROUP_ICON/IDI_ICON1
  • .rsrc/1033/ICON/1.ico
  • .rsrc/1033/version.txt
  • UPX1
  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections