General

  • Target

    0102634bad77d33778d278cc59cf606b_JaffaCakes118

  • Size

    2.1MB

  • MD5

    0102634bad77d33778d278cc59cf606b

  • SHA1

    71a021102941ab417327c5cedb19db8eccfb3691

  • SHA256

    9dcd620d55b5a2848865094091e10690fe0dc4964ab8b71bdfc46b596d897d66

  • SHA512

    12d1bde7d78f6efeb2d2d2eae6efa693ca241d84e88ece1b3111c625c9d4ccb227c15646930b2f3db197bd380747761e1aa9dd6a0a5dfa870d832f7e7e781daf

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qr7:NABu

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0102634bad77d33778d278cc59cf606b_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections