General

  • Target

    0f1b20c64ec6448652d0b277c73f398f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0f1b20c64ec6448652d0b277c73f398f

  • SHA1

    aead76e538fee04ecda8700a95e860c6e8ba9e86

  • SHA256

    0040b3663de046a2219f255047c0b11c4a20bcd56aa59ef88d01893623103010

  • SHA512

    2f5c5b77f2cc92a39bb86930ad925a03b83e9e9a4d1660e295c69c0739255e8b8e9daf28ccced99f4b4a2da267b7481a0765ac50705203fb783a3e0be595d3f5

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiR:NABX

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f1b20c64ec6448652d0b277c73f398f_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections