General

  • Target

    0195d5fb7d31874d158c1868b926b516_JaffaCakes118

  • Size

    911KB

  • MD5

    0195d5fb7d31874d158c1868b926b516

  • SHA1

    87f30ba15c7e42a4d726fcdda363083c7a07ed64

  • SHA256

    753bb7c7d2ebdf3ee4f2b02d8177ef059df6b6e294b01fd39ba9b0c23e85cb58

  • SHA512

    ad9e22828ca59d6d6f20f04fef5214833774c7b28a16fd37ae207eee13f7331d6dcb7357cac7f8d617627e76a6567d2db47fecc20e04c71760448516857447b4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0RD/JS:knw9oUUEEDlOuJnRS

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0195d5fb7d31874d158c1868b926b516_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections