General

  • Target

    0dcb08e80bf47b799e492ca619177d49_JaffaCakes118

  • Size

    1.2MB

  • MD5

    0dcb08e80bf47b799e492ca619177d49

  • SHA1

    7c1c3dd55b39eff426d793b40cdd20fc4949c601

  • SHA256

    d3884c11ea03e3c46cb366abc2e25d08b8064088e9ebde98cf098b5d89e6fd94

  • SHA512

    63b5e598c1ee7114ed5a92ad52ab920ba5b3f84ddf5787290aa768587d5db8f64656dc1fd9415bb3deb67bf6efaf03b54d8ac2712219f6b4b0e578d571d9da06

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1Pl:knw9oUUEEDl37jcq4nPal

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dcb08e80bf47b799e492ca619177d49_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections