General

  • Target

    0eaf16e2c5b8f412d5859696948ec27a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0eaf16e2c5b8f412d5859696948ec27a

  • SHA1

    c70343dcf06bde93dc805999e194d23deeeedc0c

  • SHA256

    4491672b69fee2de24a1054e804617975365e22d44deac5545f5057803f273a6

  • SHA512

    08bd702df560726eee1500f127dcf362ae26c833ca5b215bd8e13cbe035536538f1edf913f1dcc2f593611ff3b4a4028c03ef3ffeef99244c1cb6f048d018c7b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qr8+P7:NABa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0eaf16e2c5b8f412d5859696948ec27a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections