General

  • Target

    21e6de6c47afa74e48b8c9be9266c853_JaffaCakes118

  • Size

    1.6MB

  • MD5

    21e6de6c47afa74e48b8c9be9266c853

  • SHA1

    3df54671891cc9a449c9f2a46eb30cbc7227dab5

  • SHA256

    ea5cfaabe16b7c58d6f530358097c9b8ab4a0577d8a2983d9f1f5cc004e40f58

  • SHA512

    64bc44ea96665f41a62bc685e88f68e4ed5dedc645f0d06219e523f55c1639dbc9b159a05ed0adb387c8653b0f895600cac545d61622d4d4e5c7cf3b5b2b4d9e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOyldYYz46ub4WyADRAEdKyCh:knw9oUUEEDlGUh+hNMz5ukWjCh

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 21e6de6c47afa74e48b8c9be9266c853_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections