General

  • Target

    28e4a1e8b878cc34aec9247c8f61af05_JaffaCakes118

  • Size

    1.7MB

  • MD5

    28e4a1e8b878cc34aec9247c8f61af05

  • SHA1

    1f15e3792f3e0d43329788c0dcbc09d7f5df329c

  • SHA256

    798a3d185f1e6acbb98d4784b6b666da37d49f126fc65f33f725ef66515982de

  • SHA512

    b0e3ee212b453ead773daf05e1dc961a37e9af4dee1cf388c3570df0ea7460ade6e14030306c7072f8361700431007458a45d1925bbf28579b329a1bf4e76247

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUgfgdritLy:knw9oUUEEDlGUjc2HhG82DidghTOM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28e4a1e8b878cc34aec9247c8f61af05_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections