Overview

overview

10

Static

static

10

00468c5119...18.exe

windows7-x64

10

00468c5119...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    00468c511908ada1f28c2138ea3d9c9e_JaffaCakes118

  • Size

    1.9MB

  • MD5

    00468c511908ada1f28c2138ea3d9c9e

  • SHA1

    03a8f43323d22560b2a6a3b6417bbe79a20e03ab

  • SHA256

    669f5394fb27602912a470510077339f8790753c1cbc2825174bcb2895a495bb

  • SHA512

    e302aab967d5c14687e99cad1b5c1784c1b0f821f102f911316b5c003afb020950de70c6a1bfdd01f7dcdd38b0bb9218562dbc6abf6b316cdd72b935e198ae96

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pON:NABC

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00468c511908ada1f28c2138ea3d9c9e_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections