General

  • Target

    0d5e4129ea83d52b80616e508d564dc2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0d5e4129ea83d52b80616e508d564dc2

  • SHA1

    c5de869bf5f104ed61b27bfa189825f5e1473b0f

  • SHA256

    247fc91a6ddeae275f9ae90bc05c73699fa83fe879122192745778187524a9e7

  • SHA512

    1a71c31afb84d3d7670665a3350197226446f213aff321ae4a07aee4c9f3242694631f0b96a169b4c813b94b0b9096942ea87d94361584cca4dc895b96daaf25

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfM:NABX

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d5e4129ea83d52b80616e508d564dc2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections