General

  • Target

    0d364ac7e5abe0363e6f17201f6e89e5_JaffaCakes118

  • Size

    1.8MB

  • MD5

    0d364ac7e5abe0363e6f17201f6e89e5

  • SHA1

    1922b35dffd5574f4781699681b7b8823694017d

  • SHA256

    3eab933b82077df388e9ecce311659bc1a8c3d27c1c252db72f0350f950df2b8

  • SHA512

    a3b6fd1873ef5a10b17dcf68ca4bf341a3841ccfc47ce5e4ddfe5885f361fc92678fa174c2d7d2802abe78e90f10865e6e959acb6c53c101640b336d68b74867

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOI:NABv

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d364ac7e5abe0363e6f17201f6e89e5_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections