General

  • Target

    0e4eea985ac6b79effddc7924f94958d_JaffaCakes118

  • Size

    2.0MB

  • MD5

    0e4eea985ac6b79effddc7924f94958d

  • SHA1

    a06771712868ecd03d35c23b35f8ef625e60c1ba

  • SHA256

    ccd112345f9660b33a8c3a63885f1b45d036d990997cb63f9fe353ab88ffeeba

  • SHA512

    bc5055c5f2b4c5e535bd4a4f2f04e699d6f2751e6767f3a5321d375cf744bc65ec9321e87c4c90b7629ec6b1244d3e883cc59c4096cb49b47e3f05e7e0fd53da

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafiS:NAB8

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e4eea985ac6b79effddc7924f94958d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections