General

  • Target

    0fe4d3b007fe17b20efe4fb4025035d3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0fe4d3b007fe17b20efe4fb4025035d3

  • SHA1

    5842479aa87807438b9267759c77b7ecd41111e1

  • SHA256

    94d2e14ba7653b9cafa62dbccc9bc71edb5eab298870eab575e6a20810efdb36

  • SHA512

    ebb6f8553d7de2f6c8127d17d99a298b59ee0b2d300a95132b19a207f0b3a703c4278a7e17c8471f26a0cf88a84c2bee2f68720f7f10e647d6165f7e34890dcf

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfK:NABL

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fe4d3b007fe17b20efe4fb4025035d3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections