General

  • Target

    025ba490fcf2245a84bbb4372b3f1262_JaffaCakes118

  • Size

    1.8MB

  • MD5

    025ba490fcf2245a84bbb4372b3f1262

  • SHA1

    5dcd11cb15b4923e9150b500b1115ba5acd72c53

  • SHA256

    fb5db127414a01b3bb1e922a95bd92947389e0b8ccf69d0c8ab54bc021323d0a

  • SHA512

    c37a8e6703d78e5cce1ea817ff857b02fc71350fbb819a478ccf3fed4959505d6e1d34cc8f9b6bd08a2be1302e1e2edfb6408a220ca480b9125a91f8ca1c9e7b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl8nN:NAB3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 025ba490fcf2245a84bbb4372b3f1262_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections