General

  • Target

    d3e9920dca3a67eff9a9c735b6103344_JaffaCakes118

  • Size

    1.8MB

  • MD5

    d3e9920dca3a67eff9a9c735b6103344

  • SHA1

    5dc91f76f5c014c3358ded7ab61c8a33fad82160

  • SHA256

    3b64795ccce9a6e2a0ee613d5aeb243cc5484a2cd96b5478a00e49553f7a2243

  • SHA512

    a198c66af6554bb8fe7e6001ef82dbf43c756dcfbffae074fc971882204c64f359a9b72a42ebbb3374df23ed31169c8c5bcd8cd478d2d0b28261b277123ea5a0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflD00M:NABl

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d3e9920dca3a67eff9a9c735b6103344_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections