General

  • Target

    0c54ff8d50d9641d10e57ef36fc6e002_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0c54ff8d50d9641d10e57ef36fc6e002

  • SHA1

    ef1c23dd9c212ed75575d33f3fb0c00e56f55bb1

  • SHA256

    55406c9048429ee0078a11c120d00fbed699f9de01068349a06289abae2e3a0a

  • SHA512

    61ceef82401ccfbd53c168cc44d306dd7f8b344a3c148f6e25fad9f79093b432aaef6782586865bc68285ceb30db8cdb9a50f04380d80b6389cc4f3df31a06f2

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U18:NABL

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c54ff8d50d9641d10e57ef36fc6e002_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections