General

  • Target

    01875fedeae89e37f7660e77b4e1c053_JaffaCakes118

  • Size

    1.9MB

  • MD5

    01875fedeae89e37f7660e77b4e1c053

  • SHA1

    22eb0d5fb426bf8e04e22a01de920392914bfce3

  • SHA256

    0bce7aa7378b9cde45c1e33a5e6ab9fb9ba3aa3b63bda42710e02fa40d40bc6a

  • SHA512

    d26c52a2909227d5ebfbd9ef28cc589d2d994999b72ef73ed8d3c1a88dab6a467c8866bf2df19794a18ea00acf302cbf17d6cf3d5fed46457c161c803d7b4e85

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+Uxw:NAB5

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01875fedeae89e37f7660e77b4e1c053_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections