General

  • Target

    bf32aef1e44906856d8899b68863f6f4_JaffaCakes118

  • Size

    1.2MB

  • MD5

    bf32aef1e44906856d8899b68863f6f4

  • SHA1

    1701f0b9babb982323afdba80564c162e47d4b2b

  • SHA256

    9efcf0289637ce3c419d32b240bfb95ed01d038af698bc4703175143e49c157b

  • SHA512

    c01f35a7e968b4c1e98bed1f5e7744b875c2fe0c0bd8b5634c866e32def55acb657c7457963dfbce2a25372941858b25e19c9f2b7f455d06a85ca5a9cfd32139

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBtI/NLO:knw9oUUEEDl37jcq4reO

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bf32aef1e44906856d8899b68863f6f4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections