General

  • Target

    dbf1685f4978ee693a05f0107eeb52e8_JaffaCakes118

  • Size

    2.0MB

  • MD5

    dbf1685f4978ee693a05f0107eeb52e8

  • SHA1

    d21485470fa8a9e181c81af451aeda77d97b3172

  • SHA256

    6c31b6a5815edd4774b38a2806b0641b3e231de5633b9cbf95ebfd0448bcf78d

  • SHA512

    3edc81bc27a3cd742825e16a9e75b204db8da1250a682e65671fd323c3b67ad14c09dea29d10b1b734b8070eedffcb7793a7e1506dd6ebe0c1091a7d942a9f47

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHafMB:NAB5

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dbf1685f4978ee693a05f0107eeb52e8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections