General

  • Target

    0536920f882f08048b11b06ae397c2d8_JaffaCakes118

  • Size

    1.1MB

  • MD5

    0536920f882f08048b11b06ae397c2d8

  • SHA1

    a796159787a7d94351646fe6582bb73b23752de6

  • SHA256

    758b904c144752e6041719db65137f81b6b986134cbbd2bdb4e8fc2a0acf9a4c

  • SHA512

    af19052559b0f637a5680956de5e5c3ea1a16b73a2dddd749887ef064965ab9731e11fd62f386b5a6894f3577e4c6a27dce912ee0748875b3f078a5fdade9cd4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejSrAuouF:knw9oUUEEDlGUrMXM

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0536920f882f08048b11b06ae397c2d8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections