Overview

overview

10

Static

static

10

0209214ba8...18.exe

windows7-x64

10

0209214ba8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0209214ba89627e1ebd74f58dfe33c96_JaffaCakes118

  • Size

    1.6MB

  • MD5

    0209214ba89627e1ebd74f58dfe33c96

  • SHA1

    85f06aebf55e106b7b6ff826d6c87e2cf64767cc

  • SHA256

    fcd7ac3f557953d8f4657de94c2d6ddba221a40b66b06f979bb958b734ac7a77

  • SHA512

    c55ff146d798cbce50d6d79e3adb95a91d3cfa71e249fbbffcbb0b509307d2fbfc7bd77b6ad2133eae9f544523743493f643100ec055d6a5e2e5f7f9186054d6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULfVUDx:knw9oUUEEDlGUjc2HhG82DiGVax

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0209214ba89627e1ebd74f58dfe33c96_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections