General

  • Target

    05d1b11d54b8e678c29e1f0e53af8b32_JaffaCakes118

  • Size

    2.2MB

  • MD5

    05d1b11d54b8e678c29e1f0e53af8b32

  • SHA1

    80e50bc2a24e3763d6d83e952b2044949adf0438

  • SHA256

    f774ec179e422e501a2554c8879b02ca85df221fb57b73b3c906feaef151e5fd

  • SHA512

    77962aae424eb1e4d789e1d51fa437269e2ea168648cf745b0bf82fb936b2d57ff4f201b48a77866691fc74bf298fac40d83673295113a3dd31c82a040c25dee

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiqGO:NABU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05d1b11d54b8e678c29e1f0e53af8b32_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections