Overview

overview

10

Static

static

10

01853b823a...18.exe

windows7-x64

10

01853b823a...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    01853b823a7d40e2bb4f6e63a9e21f33_JaffaCakes118

  • Size

    2.2MB

  • MD5

    01853b823a7d40e2bb4f6e63a9e21f33

  • SHA1

    5cb5e64ee3623924ba657c9d440fe035b7272e55

  • SHA256

    8e2a7a1ec99f151938c5643255475c1f7554f6f4b00fbbcfd90e92e6a23ea336

  • SHA512

    0294b34b2febe1c4bb976cffe3dbce03296e7b23d49287f7a706dd994508197e2ae9cb288abc5411d459d47113b9750de8b0e43551164bca7d324a4ef7a78096

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCkc30JqMopiq+n:NAB5

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 01853b823a7d40e2bb4f6e63a9e21f33_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections