General

  • Target

    8b0437bf80609f48bf13446832f111c8_JaffaCakes118

  • Size

    1.8MB

  • MD5

    8b0437bf80609f48bf13446832f111c8

  • SHA1

    0ff59c0d29c59ad28c90d7a1599b4f9adb56063e

  • SHA256

    6ee91c89b97373608818a75d4ef5099292fd67c6b5a1975792f0c865154b90da

  • SHA512

    2c7ba7d2d2750f9f6ae9e5ddc8ba0b9a3c5234642b4e157d43a8f00ee057337eff8f02401cf0c498ade3f2bcc2bc59d65ce5e4766bea0941f4f2037bd8aa79ea

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYlZ3pBjqlx7TovQmVV4dThen9zJ:Lz071uv4BPMkibTIA5lCx7kvRWa4puWS

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b0437bf80609f48bf13446832f111c8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections