General

  • Target

    0f9ef0436786b6022545f09c2cdfad48_JaffaCakes118

  • Size

    1.5MB

  • MD5

    0f9ef0436786b6022545f09c2cdfad48

  • SHA1

    c512146a9e1b80580059b2f59ffda05e5cbc4a74

  • SHA256

    6b9f597a8a9c4f2431fa6ebd262481f6d5defb69acc75c50556bd3b032633981

  • SHA512

    bda67af05d5bd22d6167ee0d787f74b9f084a940183288498ec2235eec633945c1b012d448d4de4a3de21e57c8fb07cf07c5b09b0b52049d8b985f53bdc9498c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC42AsKL/KXvqqx:knw9oUUEEDlGUjc2HhG82qw77cqS

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f9ef0436786b6022545f09c2cdfad48_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections