General

  • Target

    0b4049871e54364f8fe9141fd9dbdb18_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0b4049871e54364f8fe9141fd9dbdb18

  • SHA1

    fb04a6c72c51babc35c7da74990f4720496d903d

  • SHA256

    955affe5f336f32aca3bbeca8a35d0ead200b2f524f37110797125666d8ec705

  • SHA512

    7a6760df4851f812c3d43aecb2b607ff72839f004abf0b7cea7a602d791d99dfdb237cc6c082a55d786f1d8d6e3777b501e53352b7ea41f9410b0c4a0230f2fa

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrloV:NAB7

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b4049871e54364f8fe9141fd9dbdb18_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections