General

  • Target

    0cf81418e3677fad6ed4715f56acbc3d_JaffaCakes118

  • Size

    2.1MB

  • MD5

    0cf81418e3677fad6ed4715f56acbc3d

  • SHA1

    7f8715fa4af16f6a68c043b468e59097ecd13f76

  • SHA256

    e29bfa306017072162c8b8b3aa7d116b25221bb08500b1791fb45a93cde530d0

  • SHA512

    791c638eb7f9fe0945aa72079bd0decb59b4d20f3e18b009180d7a7bc19e2f86063d464b3dc42e75768cfd6cf3e38c77029e373cd920ca876863e524cb4cb920

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrf:NABC

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cf81418e3677fad6ed4715f56acbc3d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections