General

  • Target

    0df6209e925130202d5f7130a7e71a3e_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0df6209e925130202d5f7130a7e71a3e

  • SHA1

    1f63e2c78557f67668bd7c1d58a45fef38e7afe2

  • SHA256

    2309ce314d58d33e196d97ab1b1b49c1e43d7709525b809a7e83756ed911db75

  • SHA512

    02d6203278dd3240baede279ff3980ec89e1f3035b83cdfbafcd8f47d4fbf403e9c25edd8ff8230fc47142dca17399e8a7da110f762f8a897a9bf3d0f0a8e0d7

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U12O:NABK

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0df6209e925130202d5f7130a7e71a3e_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections