General

  • Target

    12a61a9b1fb71f6e510a16b22745be3d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    12a61a9b1fb71f6e510a16b22745be3d

  • SHA1

    0a44b67e03bb0d4d766569c1d2c2740fbd0f38c4

  • SHA256

    85ab3b1c4a5000df9ea0b0af5c54caa870970a9d0bbefec57194b07ff18c7093

  • SHA512

    329974f5402c8ba23747f2488875e17b106a9537c180132a24774ed5e3bd37574202827d058629b2130b6e85923940b4df7e7d353d76b6794171f970f6e1eaba

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cbA:NABU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12a61a9b1fb71f6e510a16b22745be3d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections