General

  • Target

    0bcd3eb8762be52ea445de570e5578f6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0bcd3eb8762be52ea445de570e5578f6

  • SHA1

    a95466bf3b5d9d40591b6a95d055d824be2c0c60

  • SHA256

    a48b09d0ab0c635f51987af5290b11c1d4cebdffdfe68cf5e441dd367c1cb841

  • SHA512

    e6da84816e36051bbeab9ce8547b11a550aed668c3e7c8bde5fa1f9e24ff6c208969c75f083f8f9b3fc9adcaca64be4655c4b8f8af672e4e7a262d5404fe5d3f

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrf+:NABv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bcd3eb8762be52ea445de570e5578f6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections