General

  • Target

    0c6c1786eb71f6a826b8dc61f4a9b340_JaffaCakes118

  • Size

    2.1MB

  • MD5

    0c6c1786eb71f6a826b8dc61f4a9b340

  • SHA1

    f757ad0cdced586f08660cbbdf4281f0509d23f8

  • SHA256

    5b17c5bf71c471064367f0f745491796380d8544850b073077bd010dc34a9f18

  • SHA512

    3d0ee521d99501ed2aec21d97be061e7fd9528f9e788dd8f6e322a21e850b52ef8c457b9f4a0d451e8e4fc36dad613baa4fcfd1fc91f6751d0b68232d6f3d3e0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrO:NABr

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c6c1786eb71f6a826b8dc61f4a9b340_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections