General

  • Target

    409a9d1b4639a4635c6bdf4aafc91200_JaffaCakes118

  • Size

    2.8MB

  • MD5

    409a9d1b4639a4635c6bdf4aafc91200

  • SHA1

    e2503dfd475b2c578deb4ca21523078e039a6136

  • SHA256

    dbfe715bba749823d3bfcc8e9ca3e2ded212ccf68313a6779ee124e3768e133f

  • SHA512

    15e3595cf16f0febdc1caaa63843cd68c789e778f29b3efee9abbb35f3793afe095cd24fd2946d2952c8f71a797737855f516a2740b0efe5b4ea9fe7984adb13

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleLWrJ5I/p:NABo

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 409a9d1b4639a4635c6bdf4aafc91200_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections