Overview

overview

10

Static

static

10

0256327d0a...18.exe

windows7-x64

10

0256327d0a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0256327d0a582dfaa1509c8f08766525_JaffaCakes118

  • Size

    1.7MB

  • MD5

    0256327d0a582dfaa1509c8f08766525

  • SHA1

    595b65fe509a3584d637debee7f224741c7f8f61

  • SHA256

    a0436b6c5910fb1899dc3849ebdfef3c057877227dab62a53655d2959f339597

  • SHA512

    36f74846a73142e4feae433be8232dd45b711205870e878e662897a14878f43e2c1fb55fed63ab901b10722ad95f03a02922d668c8634efed558ef6f3a0af394

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULQ387QT:knw9oUUEEDlGUjc2HhG82Dif

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0256327d0a582dfaa1509c8f08766525_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections