Overview

overview

10

Static

static

10

018865e99d...18.exe

windows7-x64

10

018865e99d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    018865e99dde5c794e5d5d8b7434a77a_JaffaCakes118

  • Size

    971KB

  • MD5

    018865e99dde5c794e5d5d8b7434a77a

  • SHA1

    2be49a374c6e6a09f9ffa96e34672d3772abac0a

  • SHA256

    3581aab0d8107314aedb6887d3b71e923a071d12ba1221e344e8ff0acb3d6292

  • SHA512

    50d27ef7d7604016f83c2956a6b8384c9cd86aafb2bc5f755fc45b60bd041d2c76fdc77362eddb06cfa1852f88ec83654715bfbdacadfdd7cef17316788d51e7

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8YkgcWBw:knw9oUUEEDl+xTMS8Tgvw

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 018865e99dde5c794e5d5d8b7434a77a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections