General

  • Target

    0c1ab31e6e9c5e6928241064b5942e52_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0c1ab31e6e9c5e6928241064b5942e52

  • SHA1

    aa8521a1a558ca76a7238ecd18a0fe47ba290876

  • SHA256

    1fa667be8fefcca5c10d2456ddfd9f27bf42967fe0831ed7f04b532b95e7886c

  • SHA512

    306412094cc082c98783bdcad66747a6341047167055341700b9c72c4e73cfb35626e7ba0c021102cd57154eefa437f9becf40adb4d7fff9749a7d7b23602632

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+UsM:NABI

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c1ab31e6e9c5e6928241064b5942e52_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections