General

  • Target

    05c5acfdb26f7238fe6fbbfb114fc290_JaffaCakes118

  • Size

    1.8MB

  • MD5

    05c5acfdb26f7238fe6fbbfb114fc290

  • SHA1

    4e58efefb958f186f47f3eb5656909be3441e9ea

  • SHA256

    3d72fbef116c944d221ca00dea2603d8c9a6e003d4a5aeab341d95a14dafe3a7

  • SHA512

    fc22e8b8bad6c14ef4885eda825945d64a00fafdf5263b9dbe66d4d7416d54d55856088d0c65c128a8a2b4841affd70c02eba44b737b5f95f8976a1aa8a93aee

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl/2m:NABG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05c5acfdb26f7238fe6fbbfb114fc290_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections