General

  • Target

    81216fa979a79c19a5f1cff9c05d5a5e_JaffaCakes118

  • Size

    1.1MB

  • MD5

    81216fa979a79c19a5f1cff9c05d5a5e

  • SHA1

    9d0873587a1b92a09319d4b345d864bdd38f7c45

  • SHA256

    2f2f6811286b5cc01e829eb2391121f160ba20b35c1220625788116753974819

  • SHA512

    5b8cee3bbfd15f670b671b3ff92995df0c339b7c254ef17792f19dfe85582f39cbb162e93e9c6d25ef73d21a6867fed50ee82ab481dd3332917640cadda95022

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCej5CnGJ8su:knw9oUUEEDlGUrM5CnAu

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81216fa979a79c19a5f1cff9c05d5a5e_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections