General

  • Target

    0bafea3e8cceb643b202d8e465d0d7f6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0bafea3e8cceb643b202d8e465d0d7f6

  • SHA1

    3e03bf2d5eda8742fc84a9449d456abdd26cd229

  • SHA256

    f542c92e3f42b96d615740d66a14f86d17b92483f02dbff5302a88d4df21edb9

  • SHA512

    b92f5dcfdd1e968c42bf9ac6b407e73773e6baa391711a87ebe03ab829b773eb37ff09d9792e3d89f95455b4e995b652b48f902e13727b80cee4798d457a193c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfha:NABT

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bafea3e8cceb643b202d8e465d0d7f6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections