General

  • Target

    0894b062e69dc1e6fa262beb3c1892b6_JaffaCakes118

  • Size

    1.7MB

  • MD5

    0894b062e69dc1e6fa262beb3c1892b6

  • SHA1

    9470077635ac6bda59fdef6c54a4087e7b8c65f9

  • SHA256

    ecadc31b1a36f34a5ed8df226145464cbdd03797e6af7e5eccf341463970848b

  • SHA512

    2da086a4da6b9f136464556c696d0dedcc00a55c76e5ce8487704e564e8d2f353f95af5ec7a3b7e6db7b9962df24247f46b0e02e76f157df2b68dba5853a63e5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULf22DVJ:knw9oUUEEDlGUjc2HhG82DiGxDz

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0894b062e69dc1e6fa262beb3c1892b6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections