General

  • Target

    0b311952f58b413e3167d788b925a42b_JaffaCakes118

  • Size

    2.1MB

  • MD5

    0b311952f58b413e3167d788b925a42b

  • SHA1

    ee1db98f973f2732ae561d64518a2efeb28c371a

  • SHA256

    305afed471898ee64dc9503b52b6c3f245f98b43a7b8126e5c2b093b69de20d1

  • SHA512

    d28db955bd1eda78472d38c80430659d572a4f40bb2cc6ca1d1718b475eb537827cfff001ecfcd7bab0ead446ef40c2ce6f1563b8eb55270f122d74642777892

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrF:NABK

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b311952f58b413e3167d788b925a42b_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections