Overview

overview

10

Static

static

10

00263f3294...18.exe

windows7-x64

10

00263f3294...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00263f3294dbe1b5847e03ae4ff5112a_JaffaCakes118

  • Size

    1.6MB

  • MD5

    00263f3294dbe1b5847e03ae4ff5112a

  • SHA1

    9b11776fc64b70d53e2ade1c4a768e6b922a9358

  • SHA256

    9eab7208fc3ca9f342cc455957dbe91d62530445285adb37cf1f2241657f4a37

  • SHA512

    55f214d4b765c31762529e2cd114aa0d463ac1cf2c57d366130ede0d93abd6192a7def911bb3e26df939a76cec793266061e483b246cbfe03dba4ace1c612336

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUgSavy:knw9oUUEEDlGUjc2HhG82DiBq

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00263f3294dbe1b5847e03ae4ff5112a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections