General

  • Target

    0128ca443c82f9b4b6c3069f0076c1f2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0128ca443c82f9b4b6c3069f0076c1f2

  • SHA1

    25d5dd53bb3660701cc5aee2613fe2d1e33c55f9

  • SHA256

    d274a33a4de61bc69ba37b6b11d5c469cdaf2a6107be22a1f6c97c33b67ac8c0

  • SHA512

    c77528165fbd45ee803558fd8e38abb38be79c73ef4c326f82b43bdb9383bf8034927d956362ec5730ce3f1ef70d8419f9b1d47157653ec68bcaf292de5b1d36

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aDc:NABz

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0128ca443c82f9b4b6c3069f0076c1f2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections