Overview

overview

10

Static

static

10

0200d1f6c9...18.exe

windows7-x64

10

0200d1f6c9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0200d1f6c9dcfed19e48a28bed7ce4b6_JaffaCakes118

  • Size

    1.5MB

  • MD5

    0200d1f6c9dcfed19e48a28bed7ce4b6

  • SHA1

    018d8caae1876f5eca0b9c7f2b7c83152b00e22f

  • SHA256

    55d46201bca65fc85133f7448de4a5e47dc725095f2b07063a697d2ad3623a46

  • SHA512

    caf36ac613735363341f92deb0116ef254706866414194a4bfd143b2ad7cae0bccf5ec9294b7cfe6f6a21cd03822640f0e30879dd7bda50f82f26db59096036d

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwPB:Lz071uv4BPMkibTIA5CJo

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0200d1f6c9dcfed19e48a28bed7ce4b6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections