General

  • Target

    05dba6e00982480d75e209a9dc41c420_JaffaCakes118

  • Size

    2.2MB

  • MD5

    05dba6e00982480d75e209a9dc41c420

  • SHA1

    216225e5828e8c9edfc968a25c85c5249ce7737a

  • SHA256

    3e07afa6658d4fab5ad640528e24a2844790ed67ad1c0c157bd9d6b2b3fb713c

  • SHA512

    65a7fd157de71527b220c882a3723105d0477288783796f09e38842dbbb92d6f3da622145fbae201bb3a40490ab7e8e261d7b590e5c0d6e0dfb0c54b50e8eac7

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfu:NABb

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05dba6e00982480d75e209a9dc41c420_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections