General

  • Target

    017213f0c5b884098e5e7a625b6cea12_JaffaCakes118

  • Size

    1.2MB

  • MD5

    017213f0c5b884098e5e7a625b6cea12

  • SHA1

    49bcbb8e9c9e91fa0e206f76cd53257628aa0507

  • SHA256

    1854dd6324de1b53164142cefd44d7655e20cc602ba6536d2f81d6bc82109ce9

  • SHA512

    b1fea75b89906d7dff90b5eb2ebed4b48a35e72a3dc20d5b8dc2bf6c1fe487c55ae6db9a320b272f39a6f3392146a0ab0635837e35930dc0008285ab88701731

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1i:knw9oUUEEDl37jcq4nP3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 017213f0c5b884098e5e7a625b6cea12_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections