General

  • Target

    04971311b249ec4ce85c4d09283f3844_JaffaCakes118

  • Size

    1.8MB

  • MD5

    04971311b249ec4ce85c4d09283f3844

  • SHA1

    ec9d0fb7927525d0cdd3fe49426c8bf47d8ca183

  • SHA256

    a052ae8723ca55c9c8a48e083afbf370250fda9fe150c5c0ee5966d65d3503ad

  • SHA512

    6ce00f23c2275390ee69d22087ce5c53cb58bfbfd60f8bb06a721dea1357fd3ed2accb69ed1437c2356eefe35dc9e312b376854e58a64758f4d656d52ab2f821

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlm:NABF

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04971311b249ec4ce85c4d09283f3844_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections