General

  • Target

    8ecd80e4c0a328605b50dc6694655920_JaffaCakes118

  • Size

    1.8MB

  • MD5

    8ecd80e4c0a328605b50dc6694655920

  • SHA1

    cf52f1164db0f7e6b274df9ae0d46680abd5c567

  • SHA256

    32219c66bb27540b82d91bb5cada6ba5b5dbe1ec30d4613b57e8e48d9dd77a26

  • SHA512

    8677e2d5571aa118ca554648ee542439ce8046394d2e154afc75ff06755889b45167485aec607e21a0884cb3325fcf731388a42d9caeaf646124475a6a363954

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflD0q:NABa

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ecd80e4c0a328605b50dc6694655920_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections