General

  • Target

    0acb980a4afb397aa5ba5ada160cb578_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0acb980a4afb397aa5ba5ada160cb578

  • SHA1

    69dc4bd6134f6926a093e335c9583bb888667142

  • SHA256

    42d4b3036d5ea7f86a86023a56eeb4c045534248d2244d0646f76a26bd036ce2

  • SHA512

    025674d35f27899e0da14814e1dcbe97ffd6d165d5a563f9ffd19f4b03070710135bd284588b054788a02c845b12ca05c9dbff0aee445b779fdbedb5cf98e121

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U13oAU:NABN

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0acb980a4afb397aa5ba5ada160cb578_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections