General

  • Target

    0ab9dc6a941960a6d4302b8946fbcea2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0ab9dc6a941960a6d4302b8946fbcea2

  • SHA1

    62678cb16d508d0ebd91e23bff71fe6d0c50c027

  • SHA256

    c433dd3e46707ff090d8d233b48e496af4a4c29594063184e8b732d376da1da4

  • SHA512

    ad73838bbb8abf0a637603c0136fda8a79d437d4db151d73ec6f131b8109eeb7646d43475fdd3b8f123d1520a7af7efb24ba21b2f51c3c23747c20f3c4bc8c62

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aDr:NABQ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ab9dc6a941960a6d4302b8946fbcea2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections