General

  • Target

    0b5ed68a8edc79e834debb9dc4144f69_JaffaCakes118

  • Size

    1.2MB

  • MD5

    0b5ed68a8edc79e834debb9dc4144f69

  • SHA1

    f3d3370c2501fa5c5dacaa69f75482401e559484

  • SHA256

    31eda590eda097094489f3ff17f9304f783e7bbd92b416c869ff7cc41e80c0e7

  • SHA512

    a183a2d0b56b4270e6f4326d21b97f5d113326044e8dca02c10140c1f482635479384b6506299e6ed5b76e632f9b5f703623ba170badd15083a315a32da05154

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1Ei:knw9oUUEEDl37jcq4nP+

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b5ed68a8edc79e834debb9dc4144f69_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections