General

  • Target

    168c4d4a01761a7a6c8a64acf592f056_JaffaCakes118

  • Size

    1.6MB

  • MD5

    168c4d4a01761a7a6c8a64acf592f056

  • SHA1

    4096d33ae3b9f6a8de13e84e49297d1e6ca9bb91

  • SHA256

    32510bf82420c16f3ffdd010cdcd83365109b9620cf382d1a1ca06c02c786ed9

  • SHA512

    35c38ff400ee7051c14631eb28a246761e31ed37ec65bc6afbed7ff3d63b61e705f3e5cb3ba5ff09ebb860203eee91fe4ca6ebdb8b5d2a72a60e1f4a7e7a2ce0

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtL:Lz071uv4BPMkibTIA5I4TNrpDGgDQ3

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 168c4d4a01761a7a6c8a64acf592f056_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections