General

  • Target

    052bcedb736d2137ac0bcb5012da8e98_JaffaCakes118

  • Size

    1.4MB

  • MD5

    052bcedb736d2137ac0bcb5012da8e98

  • SHA1

    a9ffa8f5ca279beafeaa725f9ca903bb1f14ab57

  • SHA256

    3cb39221cc3218fb44fdfee1e39ccf8a8f4e29389cbfcf850b8f725ea5625f9a

  • SHA512

    29b3f80228e6f13a2972bd6c48e36f5e8bc4f002cc8d814db55bdbdd33429e9fd742e39851f3bec0ecc4add66a86df98e1cbde07cb6e8b78e45547505635d706

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC4+r:knw9oUUEEDlGUjc2HhG82qw4

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 052bcedb736d2137ac0bcb5012da8e98_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections