General

  • Target

    0b1a5a9a4535a320ccfe209bfcebb123_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0b1a5a9a4535a320ccfe209bfcebb123

  • SHA1

    e57a34a8e1d43881af37e3d7286d940acbeae11f

  • SHA256

    c2c1454c79de3b5023239f2b30e96c55332c3445ed25921d2680ac2bcb6e7891

  • SHA512

    db8d8158be3713f5f9d5c2d995e1cfd083c884b05f62be84c06321d022e11dd959008acc303f3bedb93ada8c453faa1fb2f9dbd214810a977b88d53e82909efe

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlfR5:NABo

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b1a5a9a4535a320ccfe209bfcebb123_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections