General

  • Target

    0cbc9194e084c67f3eaa4152813ea48e_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0cbc9194e084c67f3eaa4152813ea48e

  • SHA1

    f05fcae86f7066739923c03529858064a1694efd

  • SHA256

    f5005d7eb1901c9278cfe7502e1aa3b15b35c62a5bce722dae5bb99b982005b1

  • SHA512

    11ba5b2907d5ba012ab0ef112a35024103ba3c911743122cecaf8f53d4cab48bc71386055a46ac9b0da9ed531bc6b351b54ba789400b9fba8d1c162a0fa983e5

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOON:NABV

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cbc9194e084c67f3eaa4152813ea48e_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections