General

  • Target

    015c37b5837d0cfbf465144baad2889d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    015c37b5837d0cfbf465144baad2889d

  • SHA1

    f5b92f473a4b70437ec707ea3d92d8547cdf5d28

  • SHA256

    3a972152deabe28794b84e064eda0f9c8f349b630172c0ffbda14dcd33820c9e

  • SHA512

    f9a5601566aeb44832b9239c81ba3fe06a50f0a6fa8420b40cfcfd723e931d9500aba63ae204534e497b1c2fa7108c7d6c58b0f99934627d15c9e67a6ccf3337

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqP:NAB8

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 015c37b5837d0cfbf465144baad2889d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections