General

  • Target

    0ab6d9b85cc5594a26237d0e77e72e01_JaffaCakes118

  • Size

    2.3MB

  • MD5

    0ab6d9b85cc5594a26237d0e77e72e01

  • SHA1

    78abbbef7de0f6c13d5472a3ac1919ed05b2ec61

  • SHA256

    d55adea8e7484035fb7335ee6c9048c710963962a6707cc4060baecba0a42d39

  • SHA512

    ab483d4e7b2c80edb9e17830d69a3b001d303dc7a731d1b6a01dd78566a43b2c0708ddaa04f27a7545d94afe4ed06475586b64ea1378ed9441ad31c22a42db87

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiq7:NABG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ab6d9b85cc5594a26237d0e77e72e01_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections