General

  • Target

    0634bc90d17536bf6776e85c303bb540_JaffaCakes118

  • Size

    2.3MB

  • MD5

    0634bc90d17536bf6776e85c303bb540

  • SHA1

    3165ce94e4601f2faeef27f5ab238e086828ef96

  • SHA256

    6e6e6adab5888ec7392af61f05d73d439184f543e7b866148842fee9b1fe65f7

  • SHA512

    5b419ef2bfb271db8b1c4425267e146dd3a94bf3e3654ddad95d32ca1dbe3003b325f594ad958b6601543180b7ac5ae0c21b9212fe3036c3cfa9399113be2ab5

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqK:NABH

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0634bc90d17536bf6776e85c303bb540_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections