General

  • Target

    0213cfbc1333f8f11e95dac64e6eea95_JaffaCakes118

  • Size

    2.7MB

  • MD5

    0213cfbc1333f8f11e95dac64e6eea95

  • SHA1

    fef5306010255dd927b97b143e9168678394eba1

  • SHA256

    9695e12ddf82eeae5e85bc80045d9753d2e1c9d4df24caaec1d5ef96ab94d877

  • SHA512

    5017e587244b18a1c0ffe124333c5ea6d8c9e3a22140341cf7014c9039491dbd1dd7c8f125c82fd925992afb5fb33a92254c80108c491b51ae2c7be1c44f66ec

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/E:NABV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0213cfbc1333f8f11e95dac64e6eea95_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections