General

  • Target

    0c4149ae48e62ea6d3f7ef395efbe243_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0c4149ae48e62ea6d3f7ef395efbe243

  • SHA1

    8935bcbee6f027d9541d2df74ea9815d392532a0

  • SHA256

    b3147af7bff5a22a750069b6d595284d1b3d532942f9a47271a3c16a24bf6c84

  • SHA512

    825580a9867f8bba3c704e315e077cb255ba08f7742881b71f0f86d451d998e37bc54ad91f2d84c6d8ba066ef1f54abd263b673d2e39a9513086e20dae75c5c8

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfZ:NABW

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c4149ae48e62ea6d3f7ef395efbe243_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections