General

  • Target

    05a6d933be69f3bab67bf3377baf485c_JaffaCakes118

  • Size

    2.3MB

  • MD5

    05a6d933be69f3bab67bf3377baf485c

  • SHA1

    27e3fa390eead5f3f1fa6730647b9b5d356ff822

  • SHA256

    13ca60529ad2e8edf8b75996afb0a345f59c3a9c33cc233408cc4982270d6520

  • SHA512

    005446091a1b77b6ac9313a58bb9633fceabc20aab30c2bd922f4108db7b0b40b8319573f9d0207aa107c0e68d9366da1be9fbc3c802e750f865358977de8c4d

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiq51i:NABN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05a6d933be69f3bab67bf3377baf485c_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections