General

  • Target

    0b1f5cba71e48d4731c5a6fecaf52707_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0b1f5cba71e48d4731c5a6fecaf52707

  • SHA1

    2a8190645d92394aa0dd64a91137acce6bb9e7c1

  • SHA256

    b9c552ea9592e5bee2fd8ed1332d1894b1b569e6eda5e6062f2390041f7df2ed

  • SHA512

    57196a7614126e4e6a9d0aa09fc7e874ca9f21f09f272d504f92ce92b6d312723c94904cde1d7c48cb05a385e4b62d90827d09f69ae8a3557e1e12509c794c73

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1y:NABH

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b1f5cba71e48d4731c5a6fecaf52707_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections