General

  • Target

    0bd638d5e4cf48dc987810a304198e00_JaffaCakes118

  • Size

    1.1MB

  • MD5

    0bd638d5e4cf48dc987810a304198e00

  • SHA1

    348b981093804d08ac7f47b0dd6e3a547f5b0575

  • SHA256

    67444eff2ff2f08364c0c85aa075e6c892665f0e94ab01154c132e566874a7d9

  • SHA512

    7c3095c8ea7373411617196d1fd940aa8e3794b03961c1f26ac61e65309ccd2e306c9cef00ac42a549736ff276a280993e0970df7489b8a4b2823fd1df7993eb

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytOFcxZ:knw9oUUEEDlGUrMN1b

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bd638d5e4cf48dc987810a304198e00_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections