General

  • Target

    0a1d2c76732cc23eb87648d3e19781aa_JaffaCakes118

  • Size

    1.7MB

  • MD5

    0a1d2c76732cc23eb87648d3e19781aa

  • SHA1

    05e8f4cab68447b94fe927c9b13cb809ce96eb73

  • SHA256

    ffe8b4ea63a124a21ccd2ee7052508834c5d84bf834741792136b15398cb0d1c

  • SHA512

    73958e4a1edbd5b1db4ab3f8c77588f2ad16db75179f4a0cb0ad3174ab414329b720dfe9e200357db84b6409f09415b2e57921cd12ffdfb8d6a41f1350f20c8e

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKY:NABT

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a1d2c76732cc23eb87648d3e19781aa_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections