General

  • Target

    0328e2a3e54b12d4ca3dc1fc6cf47c19_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0328e2a3e54b12d4ca3dc1fc6cf47c19

  • SHA1

    8efedb7e9c84617095e149c21cd01661dafdeee1

  • SHA256

    eb2e659d5fc6d56b713c3d662921a82ef2fe61c0a5b2c88b971bd0d74c8d44dc

  • SHA512

    8431d8738229cb7b3f2c6e10bbb8c78c455a0ed8df098da735a74445f976d4f379b49401e4f6a830d44d54b9f39219e961913fc58fba81613c31f9d26b6a1654

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlq:NABL

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0328e2a3e54b12d4ca3dc1fc6cf47c19_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections