General

  • Target

    018e44fc2dcbc896fab7394f7950e6f7_JaffaCakes118

  • Size

    1.9MB

  • MD5

    018e44fc2dcbc896fab7394f7950e6f7

  • SHA1

    72c472fb79a6c0039c51ad2db967d44fa97876d3

  • SHA256

    833b8365b36c2da2599f52f0d68775eca34ec5b1919ec0ab978d13aa7cda2ecf

  • SHA512

    20fe0ea1b4e0f948d0037ec08c56670967035bd8fe71596c44f4d6d546052f20d64b0b198c1f402507de4faae3892c67f4ddefd3ad186e22a38866026dd596f0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1R:NABQ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 018e44fc2dcbc896fab7394f7950e6f7_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections