General

  • Target

    0254a196cd949bb869c5bee0f6801684_JaffaCakes118

  • Size

    864KB

  • MD5

    0254a196cd949bb869c5bee0f6801684

  • SHA1

    502be63b0dacf947dee402d880d13182df9b7dfa

  • SHA256

    a55a6ef201526c6657b69644bbd60b1ee9f0c57b32b65e4464f022484bcd1d88

  • SHA512

    d8b5e31e9b22dd4245cdcb60f61859d60b6541e431eb415e181f943c908ae3bdda725f1b7b57e5473c923156e93991a0dd4b9b50f7f3d13b8848f00fe7ef1da2

  • SSDEEP

    12288:J5LnfEnwhTb2GlaekkIWQm/w2ONMXpGXXUAjeX/95ETPl3R4XDwXMDYMYpzJbiWv:JanwhSe11QSONCpGJCjETPlOqzJO0R+o

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0254a196cd949bb869c5bee0f6801684_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections