Overview

overview

10

Static

static

10

0363c620fe...18.exe

windows7-x64

10

0363c620fe...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0363c620fe8c878afca013cf57376de9_JaffaCakes118

  • Size

    1.2MB

  • MD5

    0363c620fe8c878afca013cf57376de9

  • SHA1

    a8d2bd9f20cc99bb34edfd0e351adea8cdce98d6

  • SHA256

    7fbae86f82488a014b4180330b1b2057f7a02f21e4df4dea8d4f2f4e2cc55ba0

  • SHA512

    e48e0ccd0835508ca7310c1efddfbaed82103d48ee33da67899e18e3d8f0430cfcf8ad52be58fad226f2312cd8cd1d316887dfd0c7f1ea5ec7ea3b6f1d81ff62

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQoEAXaE6Bc4wo:knw9oUUEEDl37jcmWH/xpP

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0363c620fe8c878afca013cf57376de9_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections