General

  • Target

    05da1e72c19691b2282fc03657a6a0a4_JaffaCakes118

  • Size

    1.7MB

  • MD5

    05da1e72c19691b2282fc03657a6a0a4

  • SHA1

    7093c21092f440be2f5790026076fdaf079eb118

  • SHA256

    fb08ee20a729aa90eee5fc4f671ef90ab89b28cf1780e5e4ffc9205f1eb81a5b

  • SHA512

    2822085734e18206af0c4b1df2ba7f384f89177ca86c4ebeb3dc3fca30e8153cc78723fad477749ff1c1fd85f65a2e6f4f0a0e195e759d295e678809838d1295

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pxtU9:NABW

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05da1e72c19691b2282fc03657a6a0a4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections