General

  • Target

    043b65f6a12ebd2b74ba98a6cfda57b7_JaffaCakes118

  • Size

    2.3MB

  • MD5

    043b65f6a12ebd2b74ba98a6cfda57b7

  • SHA1

    3559973a5fe9dc36e674e62186344d5f35e11dc2

  • SHA256

    c79e0571275f67703d92d92c9d4f7596202a3871619c54102ef712d0f7e65fb0

  • SHA512

    9f331d3278f54996b1645f518b02c4cc5bbb00ca15b17f83e318a334ba02b4a3b0e650e231c5e9aceef17f971c4db35cb904b6088a67be1686c62091af8a0aed

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopBxXB:NABU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 043b65f6a12ebd2b74ba98a6cfda57b7_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections