General

  • Target

    04dbcecf75048fc5b96b3bfd373f8e42_JaffaCakes118

  • Size

    2.7MB

  • MD5

    04dbcecf75048fc5b96b3bfd373f8e42

  • SHA1

    12de76daff0c54eb86c2f1590cdb67c3b8e07d37

  • SHA256

    1f7895ad2eb4fe0f696a19213fb603ea02e1a74f5bcec8bc6539b9045392754b

  • SHA512

    e0b0e7a8d565b3df5659cd966bf8c06a57e2bab623b1b9dc50e9bad279ac5dbbebbbc4777ee06149fc52130e43f8fa55653e125c5d55d8041bbc7b7f1b3f86a1

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5CQS:NABY

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04dbcecf75048fc5b96b3bfd373f8e42_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections