General

  • Target

    0195f98e9d259474167eeca6e7f62dee_JaffaCakes118

  • Size

    2.8MB

  • MD5

    0195f98e9d259474167eeca6e7f62dee

  • SHA1

    85d5ba5db9632c7b2e9212101f169c06a3cdf7ee

  • SHA256

    df2bb0f009eeba5a175630fcf2e2a6bed3a0687ef67dfacbb1e874047d487498

  • SHA512

    02446409043ce25118c419afaa0ac52dd32a9faf13957e1c3e90eef134bc48670f2f22a481caab32035ca0391c48d3856e0da65d0fd223aa2e1a3398c39f0003

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cQedCN:NABy

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0195f98e9d259474167eeca6e7f62dee_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections