General

  • Target

    056b5a50535a64eedacfe922e8c9d5b0_JaffaCakes118

  • Size

    2.3MB

  • MD5

    056b5a50535a64eedacfe922e8c9d5b0

  • SHA1

    e2400381adb948dc6fa41e6ff1e493f46a5465d5

  • SHA256

    a3a21fa2a585408a7ec8d4840050706c0650dc465dd0652b09248f5388f8e93e

  • SHA512

    1ea49d5efa1331e6818fd0d7ac680e68f435fb20f51f57d0ab6bc412a2298321a82c4a037085f46879c23a043fd412b3a6664f86a610653f3dca4c932c671f31

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiq93d0:NABv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 056b5a50535a64eedacfe922e8c9d5b0_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections