General

  • Target

    05641542e0b1904a8843b8d2ce2cf333_JaffaCakes118

  • Size

    2.2MB

  • MD5

    05641542e0b1904a8843b8d2ce2cf333

  • SHA1

    16cbb438cdd3dc011bce1bac5887329a7e52fe64

  • SHA256

    2029e218bf2d699cc77e3cf94fcbbf99a50851a8ffef91a888d17165e05cafc0

  • SHA512

    3f2ba333a43ed2579beb79395adabfa38a097fd7a21d684a21d244600b27456a58be9949875c585d9c63ed0d8fbd2b2757bd2ef26f4703956101fa6e4e5f8c75

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfU:NABH

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05641542e0b1904a8843b8d2ce2cf333_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections