General

  • Target

    632eca52c7bc4b84bbbd1870e588c2c0_JaffaCakes118

  • Size

    1.1MB

  • MD5

    632eca52c7bc4b84bbbd1870e588c2c0

  • SHA1

    1cd2aef81f118f6abdea3c5fafd838d411afeca8

  • SHA256

    c0ad8813c15cae58113dc4b40d5fb9f738bcae9bc02776a616cfe70e194087b6

  • SHA512

    a581833069ab0baecb4c1462488afd4a664fe22e8f52f778d5424e5738ccedde02a5fbfcd6a7d8baaa7977cfe4554f77efd9454f01d5d85d7fac5b3d95ed5285

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBtuACpN:knw9oUUEEDl37jcq4rup

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 632eca52c7bc4b84bbbd1870e588c2c0_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections