General

  • Target

    0d9deea68e1e9029a090f7342e543c04_JaffaCakes118

  • Size

    1.5MB

  • MD5

    0d9deea68e1e9029a090f7342e543c04

  • SHA1

    8f930738c94aafbd8e4f73f3e211070f5ad09f53

  • SHA256

    dc216329b020f437f2b8deb99f36b4b9bdcd3ae8b5d262c50984e8b3147fce75

  • SHA512

    918e82d02f1c9b4871770ac3632008c79d6ac6e1667c60bcf9465f87cbaa864124c851c299fbb3c0c4257d02b1e38c3a523b54b94a337264b9111513ece792f8

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcquVoVbvVkNQaWdZzGuMN5J6f3:knw9oUUEEDl37jcquVoVJ38lC3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d9deea68e1e9029a090f7342e543c04_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections