General

  • Target

    002a7380e67dcc95813d6e0270a53b83_JaffaCakes118

  • Size

    1.8MB

  • MD5

    002a7380e67dcc95813d6e0270a53b83

  • SHA1

    ed6e207ad712585aabbfcb1483f7f3abcec336e9

  • SHA256

    d6361688639cf485e9779da5e56f4f0092b3f43b95f149b1fd3daa95ee273139

  • SHA512

    bbcbc128bb7ae2b0780abeda2aa64b1c94bcefab527d06368297e2a5d1c53575eb816df8a016c0a8177440775f9fb7c870ee4bab3191a01f167b44320bd2cf5c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlE:NABV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 002a7380e67dcc95813d6e0270a53b83_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections