General

  • Target

    0636c0ecaab83318a2fdd9009a6732d8_JaffaCakes118

  • Size

    999KB

  • MD5

    0636c0ecaab83318a2fdd9009a6732d8

  • SHA1

    452b3d7ee74928d5b27f8f4cf28f3d798ede4718

  • SHA256

    1b4b1fa6ccc72b39d9722a22f2f13bd601b2c619c69db66ef5260a708d31999d

  • SHA512

    159b2c186c7fee0f89a60e66d1ce9e974709a06d641b5e1638c5a5538171ca9930ef282a5553001bc709ef57feaf27c4e59c7462c810bb4f7ace4d289ad07630

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejHhK:knw9oUUEEDlGUrMs

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0636c0ecaab83318a2fdd9009a6732d8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections