Overview

overview

10

Static

static

10

0159ad6205...18.exe

windows7-x64

10

0159ad6205...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0159ad6205140d8bd64d009973e30c35_JaffaCakes118

  • Size

    1.0MB

  • MD5

    0159ad6205140d8bd64d009973e30c35

  • SHA1

    032cb084feeea722f9d16cc7513525aaec32e46a

  • SHA256

    e2c7c2938467481b4f67fb9dcb344274572b06349cedb7ccbc097a8b80850c45

  • SHA512

    58a767ead5e26279717169f4a457277e775331d1eabe836578ae94e0629ec6b07dc712140e007fcccce8280063c186ad8a3f58d60543e7c3784a7d79710e7e8f

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgc66HVFZm5zr:knw9oUUEEDl+xTMS8Tg4nZgzr

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0159ad6205140d8bd64d009973e30c35_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections