General

  • Target

    05f2d916130d6fe2940a24938fd78ec6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    05f2d916130d6fe2940a24938fd78ec6

  • SHA1

    cd0862b7b0068d88d9bae091a3ec69dc7a812101

  • SHA256

    a879b28b1c4753a51ab028e5b4bef30c9f82e70d0072adadab8b39e636995309

  • SHA512

    f3da4ac413561c8b03db6c0f1d771b2786f21ebbdb27d6e7537f801c29e434805dabd8d69f59f5fe7f71be72da91beb92fe1fd0f76f30538f703df0d9c0541f6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfY:NABh

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05f2d916130d6fe2940a24938fd78ec6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections