General

  • Target

    029dfe4995a5026aeca84c9e1115f3e0_JaffaCakes118

  • Size

    2.3MB

  • MD5

    029dfe4995a5026aeca84c9e1115f3e0

  • SHA1

    cbcf9509f02884dc552a03d1ca0bb3859988d9ec

  • SHA256

    172f088c54fd27e06f556bc1bda2ffcf664b22c21866a50880ddd30b5bc805d1

  • SHA512

    3395ab680009f4ade53de2d9fe2b990b942dff025ed5f7d17f3c8e2138b8b0d938732b0e642674b5b926b592bd47f26c3983d0750b40daa37f9412bee42ae2cf

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqn:NAB4

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 029dfe4995a5026aeca84c9e1115f3e0_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections