General

  • Target

    0870504297a4a457b2a06d8c27e3f7cf_JaffaCakes118

  • Size

    1.8MB

  • MD5

    0870504297a4a457b2a06d8c27e3f7cf

  • SHA1

    e44a2515577d6e6017e2392ea42196dc71ca3e2c

  • SHA256

    214ad5a08985e3081cfd969c848f1bad2fac7cb1aea47a5f3ca8a9fd21f82f3a

  • SHA512

    b5544762525937f26c64c8e6ca5789861f788c3ad8a2d57baa260d7aad10f79d6d8faf0c521af2daee6a1a35be772d1691582789543387854edeabccbeb01780

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zC:Lz071uv4BPMkibTIA5lCx7kvRWa4puM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0870504297a4a457b2a06d8c27e3f7cf_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections