General

  • Target

    05471c6e2f43e7cd4e9c57947828b298_JaffaCakes118

  • Size

    1.7MB

  • MD5

    05471c6e2f43e7cd4e9c57947828b298

  • SHA1

    5a111aaaf62c0eea850238ce88c00c83bfd002e5

  • SHA256

    1f978dee5c39fab9487dded35c0f073a246f9c6033ba5158833c562b03c2604a

  • SHA512

    a52433bc1f6a4c1a832ad0e93318262f0b1b7793a2dad8e3cabe53bc055fdf126a48d5f1ec11c74ee88d65631cc8105674ac367acbe0fe53b160554a5d5a9916

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFt9:Lz071uv4BPMkibTIA5I4TNrpDGgDQz4q

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05471c6e2f43e7cd4e9c57947828b298_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections