Overview

overview

10

Static

static

10

0328089446...18.exe

windows7-x64

10

0328089446...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0328089446d39e0bfa908eb04839a4f6_JaffaCakes118

  • Size

    1.6MB

  • MD5

    0328089446d39e0bfa908eb04839a4f6

  • SHA1

    951a14c98d61c4ee0d58d069828109e8fe813f68

  • SHA256

    e5426a8e2bfd6f76a08d199381d0300bf1143dfd8377596e3447e691ab1676da

  • SHA512

    391ccdda98d25fdddca4678147099a9c08dab45888f48144fd9782a5e2a3cf0d4010eba570c23e27133c99e690d58d49737b5a1651cac771d9733ca3319bfeb5

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUgS6nU:knw9oUUEEDlGUjc2HhG82DiHnU

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0328089446d39e0bfa908eb04839a4f6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections