General

  • Target

    03d1153c64685251bebc56a0ae6cab20_JaffaCakes118

  • Size

    2.5MB

  • MD5

    03d1153c64685251bebc56a0ae6cab20

  • SHA1

    fa96c49ee7e1828e4bf70af1a695b51f0bfa62b7

  • SHA256

    307b6ba20f99498f7ee59320af7b9d54243e761580f847d7133d3fc57d6f7977

  • SHA512

    5e38295462db09e902469534b2de18838e609eb3c6f18a4ad7f65fea43549d9d60c1b8c14e4073d70fc096d08b53e251eeff86121a9e75281b07435ad6a9c002

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cQeXQg:NABX

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03d1153c64685251bebc56a0ae6cab20_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections