Overview

overview

10

Static

static

10

00856b1f15...18.exe

windows7-x64

10

00856b1f15...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00856b1f1561560a790d8b29d602a2f7_JaffaCakes118

  • Size

    950KB

  • MD5

    00856b1f1561560a790d8b29d602a2f7

  • SHA1

    52abe3725f9677dc290aee66e37f3dc6154a774b

  • SHA256

    728ad0cd7f68d9bfc6efb4b32a8bb4803738b47abdd24d68e4b02ec7faa43e46

  • SHA512

    38ecda76bf84deac98c383898529cb256dc052b86a953d39a768685c284c1c91aafc0075684bfc165b2fd93ab2e3f91f978a30aa252d4f1c7a2982336b927130

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8YkgcWn:knw9oUUEEDl+xTMS8Tgl

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00856b1f1561560a790d8b29d602a2f7_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections