General

  • Target

    JaffaCakes118_f9a7ffe1094b39a53f23bb8f98217f5d5787a34b127cb71610ba485bb6135904

  • Size

    1.1MB

  • MD5

    67aa6e1036e7a7d9d07b416e89a7d4ad

  • SHA1

    bb8e0e96bb48dfcc94731ff53157dcc833c7db07

  • SHA256

    f9a7ffe1094b39a53f23bb8f98217f5d5787a34b127cb71610ba485bb6135904

  • SHA512

    f94987076bf4859dace8458b3c0e4c1a4a9f23ad8a6c1723d0fc90625f2918f10c57fc21a0d9f17c26b70b0a5113d518d1732336909dd86d4378531bb22df7d4

  • SSDEEP

    24576:aazYpiYjt3IZXeaR8UycoTXz1ICQNwEKVOga27K:a4wjmXeaR8jv109KaF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f9a7ffe1094b39a53f23bb8f98217f5d5787a34b127cb71610ba485bb6135904
    .zip
  • 87983002d55534e7068ae134fce9581aa6de19d9b3c870ad186ff3b49ebd304a
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections