General

  • Target

    1eb29aa81c495c274e41e1c4bd5daa45_JaffaCakes118

  • Size

    1.6MB

  • MD5

    1eb29aa81c495c274e41e1c4bd5daa45

  • SHA1

    a6440f29636e23d936f2d4380738228ff872ee2c

  • SHA256

    0efea7cfe940316370d4b6bffe9f2b78b1775bd46e4f174c22db3563e5449ec0

  • SHA512

    abe4059510fdc0680de1dc38005cc77c874c480ef940f3eb58e88770930c1e8350efdfb0237a5045f8b61923b80e7a6d495d46f43d80c4aa36779e3faf1bc265

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOxIgiTxVXgXntYR:knw9oUUEEDlGUh+hNqV93R

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1eb29aa81c495c274e41e1c4bd5daa45_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections