General

  • Target

    0fb3e49648f72e3fee731ce8c3ed543d_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0fb3e49648f72e3fee731ce8c3ed543d

  • SHA1

    598a9f65a4f5842fd47caa2f51344af786bbd6e1

  • SHA256

    329455aec0662481ea325538b54df0ef0a30ec676aee09cb8da698480c44acd4

  • SHA512

    a2c149b0891363aa9bebf6fde4d87e46a1ebd02e7c29b5223358dc72dcfba51097e2f9fd5dc2779388e2e53041a70c19a53668aaaaf9d608964d8e0592c48c2c

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOF:NABG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fb3e49648f72e3fee731ce8c3ed543d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections