General

  • Target

    06e25e3438d609a12b37c84b8c852f16_JaffaCakes118

  • Size

    2.3MB

  • MD5

    06e25e3438d609a12b37c84b8c852f16

  • SHA1

    55c665d774fc1694dbfb4a02ce89508347e800c8

  • SHA256

    923e817b27fb195d4a3160dc2f2cbdb8b51e51da69c9cd6174485be59e48d3d3

  • SHA512

    715c03ff03713ae9d7bf30d79d362064c4c2ff8aae4e55ab1f87db0261656d613cdf8584de7672c50fd263be631886199a956da71004853d45d7b43d087e9ef4

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiq4l:NABV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06e25e3438d609a12b37c84b8c852f16_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections