General

  • Target

    0564ff92736f21c17a7e4697cdc8e6fd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0564ff92736f21c17a7e4697cdc8e6fd

  • SHA1

    3887a91322fb57d0586560e2be8a0451b0296112

  • SHA256

    d0d6899518bfe40a402262ec0b27faae46813a413032a68c88d81bed49542b7d

  • SHA512

    8894b291bffad6163238e65e88e9524ed7e58d379241815ead05cc6c0c139f42df808a0dbba0fe315902b8f1e196ea79900b64d0c00079381a3060ad34b9af9b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfKD8:NABo

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0564ff92736f21c17a7e4697cdc8e6fd_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections