General

  • Target

    935961e3228e2a42c22f8a8e49c864f8_JaffaCakes118

  • Size

    2.1MB

  • MD5

    935961e3228e2a42c22f8a8e49c864f8

  • SHA1

    3687bbbe96dfb18d38dbcfe28842c2aa6e07b433

  • SHA256

    251929a75f4efe7ca9dbcd91071221a168bed959f816f536374aec38781f1df0

  • SHA512

    5a36fbd14c166cb98c4a17c36e71427dfe053e3c4b79f355822db896d123cddd5673f7baab2ce4f8b77bc0a6e37de82c0ca067c6faee8da68968a30ad9f79910

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafM+:NABG

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 935961e3228e2a42c22f8a8e49c864f8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections