Overview

overview

10

Static

static

10

00d95d2993...18.exe

windows7-x64

10

00d95d2993...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00d95d2993359795ff7f2a0bb7e75481_JaffaCakes118

  • Size

    1.7MB

  • MD5

    00d95d2993359795ff7f2a0bb7e75481

  • SHA1

    9449ef8494e180f2456b7e3579c7f2dad0b0b8a0

  • SHA256

    9d75aa4d0f7b2c4dd3e51b8aa85f0115fb8babcee2522653b56c2f37763b3729

  • SHA512

    51b8edb78d38d5555d1726a668358f9645e1429d3db1552817fe3e65cf033438e5af8d855a4efce7708bca5fcdaf75c7b822cdfa08e8681d95cc8cb0c4bc809f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULfVg:knw9oUUEEDlGUjc2HhG82DiGVg

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00d95d2993359795ff7f2a0bb7e75481_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections