General

  • Target

    04a98fc25943baa1b17607ff89057cb3_JaffaCakes118

  • Size

    1.9MB

  • MD5

    04a98fc25943baa1b17607ff89057cb3

  • SHA1

    18c14b247463e19b2fbd08822524dd2e3a94b25a

  • SHA256

    9fa15ce978a48133eae595baed5a091ca16d1f4652d5d06ab403a7171c8f7211

  • SHA512

    46e3f51d1942966ae6719bb0ae4014feca37f002c93f24c8ec8c14cd108b79d916379e0bf77e0e369e5897fc141606b48fb1c9dc26559a891cdca31587607b60

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1i:NABL

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04a98fc25943baa1b17607ff89057cb3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections