General

  • Target

    0d50cec9980a64c1b797394ffc4d7eb2_JaffaCakes118

  • Size

    1.3MB

  • MD5

    0d50cec9980a64c1b797394ffc4d7eb2

  • SHA1

    205a6659a6c5a9d16c8a3661f6ee391fedc6a9ec

  • SHA256

    19ee59c00e263347b5f5f25d2c44ef996221fbbd1f174870f786dea2fcd27029

  • SHA512

    c82edb332e670b4751d6553e203beb5c8ee723acd3f15a0fb529723d7b4f9e61f84e975a0a4b626037cb3ddfb699eed64fabef666acb9c3caee2078cf8b79e30

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOBB7J:knw9oUUEEDlGUh+hNBB1

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d50cec9980a64c1b797394ffc4d7eb2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections