General

  • Target

    0e65fa0436f6219503d9b362964e8cd4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0e65fa0436f6219503d9b362964e8cd4

  • SHA1

    17e67cc0a5766a1e477f8ca36d0868239d0841aa

  • SHA256

    ea46c1b08207a9c8790d47ffc47132a0d091896db15546a36e4585abef26ae54

  • SHA512

    fc55f3e94d2b2b78e399f83cb4d26f3345419279536bb318c3d5e0d394d6636699088c7840bc636cf32f68a643698cad4177aa3a1ad33e9120a14ab359ed5da0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrf/:NABU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e65fa0436f6219503d9b362964e8cd4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections