General

  • Target

    0856c944ea8ae7926b0433b8579b4114_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0856c944ea8ae7926b0433b8579b4114

  • SHA1

    ac68a2f59fc5403ea966d7c366936bacab7c79f8

  • SHA256

    f55fe5433218134bd67cf65ef044e339a8be062bd9c1075c50c0c9a2b29634aa

  • SHA512

    c78ca2e8d70dc6e15c6c0661b8d453dbbf4e7d7a6d7f6f341d1458e35f3a542065bb0d32cec13caacb3e9812633030a8ff631bf31bf8ae416037a17ca091e644

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UQ:NABr

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0856c944ea8ae7926b0433b8579b4114_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections