General

  • Target

    01fc14956c8b3fa79a3c9f4b2a1d09c1_JaffaCakes118

  • Size

    2.3MB

  • MD5

    01fc14956c8b3fa79a3c9f4b2a1d09c1

  • SHA1

    fca7e22341fd2adecd35a53ec77a059d6a046300

  • SHA256

    40a28bb93d03379fb57662a234fe6e95e6a278c9d6a5a436003a8d09de99558d

  • SHA512

    131aa5621f866e9226cbb1e81fc36b1ef02cdc725c53baef292dea5e745c22d867608ca1f5572965e80ffbfd1c19180842123cef98b623ea5173c7df0a7d21b5

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfET3:NAB3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01fc14956c8b3fa79a3c9f4b2a1d09c1_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections