Overview

overview

10

Static

static

10

01941d8a3c...18.exe

windows7-x64

10

01941d8a3c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    01941d8a3c0a0652106ebb371ce57d50_JaffaCakes118

  • Size

    1.4MB

  • MD5

    01941d8a3c0a0652106ebb371ce57d50

  • SHA1

    cb276c7977518ae066816ab1fded9ff212a82629

  • SHA256

    6d7a7ca738f769e6b8f8b7ab9be8ae9f95930f35d5b8c3949ef3779be3ede6a0

  • SHA512

    3a4d807865ed95f43f4917a23d4f27593a6d2c288dda82c9b49827991d80720b8702f6fd8a84116a64c888208630fbcb24b563c421d384f31bba6e3c9a5df783

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC4ytTy:knw9oUUEEDlGUjc2HhG82qwwe

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01941d8a3c0a0652106ebb371ce57d50_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections