General

  • Target

    0863d4cd7f509741109cda035aa549d3_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0863d4cd7f509741109cda035aa549d3

  • SHA1

    ce6a83da3dfb1898f797cc99f0126b52f6815efd

  • SHA256

    430ad14affc68211c2cf9a51136dafba6c305070775de023587cc6325f8b3fa7

  • SHA512

    72543d7afad8a9165d5d85a5930c35be33cd4312e5f25c261ad26c1ba1d21f0e1f9d68c48166ba5b760b9f757a4a677085bbc26f4d16ad57113050db62116458

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlLM6:NABg

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0863d4cd7f509741109cda035aa549d3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections