General

  • Target

    0180ccb68e1e9ebf4909928379e14349_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0180ccb68e1e9ebf4909928379e14349

  • SHA1

    234dd3c1b03eb42671dffcf454801b04bb3a830a

  • SHA256

    4d517f5f9b6a7abeb8f475add74f17cf0a11f37951b27ea43456d4363eef73a0

  • SHA512

    cc07946238cd03af0e0f0400a3b6d3bf3d6bcdad1551cd6ae1ac3c1ec7f96657dcf04953faa573e6286df65c494ea46ba1d58d354939029fa6896ff520de84a3

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qri:NAB9

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0180ccb68e1e9ebf4909928379e14349_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections