General

  • Target

    16149210e1c5e7e8e73800d58bd3545a_JaffaCakes118

  • Size

    1.6MB

  • MD5

    16149210e1c5e7e8e73800d58bd3545a

  • SHA1

    d46bdbf69731f1222f6e22fe24ed9e139ccaa4f3

  • SHA256

    1c33cc906bcdcdfec019eba29eaf68d5e74b43efd744e9b69f1a60763a03a7e7

  • SHA512

    f1d738f883960889e681da7452660153630afeb12ab1fba86258fef6daaea55edc3fbd18792dcba35c2ef0a14c6011b02f82ff62e984b595c786e853d7985dc5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULFbsHh:knw9oUUEEDlGUjc2HhG82DioAB

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16149210e1c5e7e8e73800d58bd3545a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections