General

  • Target

    0bff6920670e8417dbcb4b0e80f18013_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0bff6920670e8417dbcb4b0e80f18013

  • SHA1

    d35f7445395e536b2aaa20470523d0d716a7b9ca

  • SHA256

    005362efe53cfe08b66964d0046530b18334da064cf2699187fdcb7a927d805c

  • SHA512

    1ded1fab8f907343b424bb104ff6466b2060e1e378ab44257dc0b1699b327aea842b6dd40d3f1d4670f8b9ec1ed193c87c8c2518a3ef5c1249341d0a42be6450

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlg71H:NABJ

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bff6920670e8417dbcb4b0e80f18013_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections