General

  • Target

    04443d131a03bf2a2f53cf6aa3c86251_JaffaCakes118

  • Size

    1.8MB

  • MD5

    04443d131a03bf2a2f53cf6aa3c86251

  • SHA1

    fa87265d27d908f0ea32b00cbd69b1e4cba69b41

  • SHA256

    49a81e3870a3e5928fede66308e1742d8269d046bece1cab4fc8b2066073308c

  • SHA512

    ec80e2a5a2b080d5f96f01d268b799c3139a470d0389cf0bee5f47a61e61cfceaf4a1ef1fd8de2ea9578a8281bbc847418c74971a2d4878d13bb350e02685c0b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4puUsu:NABx

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04443d131a03bf2a2f53cf6aa3c86251_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections