General

  • Target

    0e1800da8e6c44f5fc20db32f85c1cec_JaffaCakes118

  • Size

    1.8MB

  • MD5

    0e1800da8e6c44f5fc20db32f85c1cec

  • SHA1

    b30716b5946a88eefd940184b95f9c8f9e3d1433

  • SHA256

    419666cf36b562775c33b30d5fdc1fa0863463e9f2a3f1a75d2abf7a8d4c4632

  • SHA512

    e873a7343a8198c754f13890c62278efbd9171f92f3367595810df8f588cb009be89b8ef26b3eb9c8d33f7fcb3274e79db089b7c7a9d0fcad11bb7e6c3096661

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFto:Lz071uv4BPMkibTIA5I4TNrpDGgDQmKA

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e1800da8e6c44f5fc20db32f85c1cec_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections