General

  • Target

    04280d3c52e31d9cc74dcd95e73f9e16_JaffaCakes118

  • Size

    1.9MB

  • MD5

    04280d3c52e31d9cc74dcd95e73f9e16

  • SHA1

    507842dbb1fad652908c38d2f4d0d6cbb004b606

  • SHA256

    4a294bc149fb626c99539ebffbbfb6b32a92a4a45b537895fcb47dd4549f6e2e

  • SHA512

    ddcda3b5339a8cf8898f484157fd5d2c5666e73c56683e4e8b4e48ee158bb288f12a906a9b175f1be8fea70c113ed58c84fb5cccfec29b906a7dc556bac0d99e

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U0:NAB/

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04280d3c52e31d9cc74dcd95e73f9e16_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections