Overview

overview

10

Static

static

10

0350f614a0...18.exe

windows7-x64

10

0350f614a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0350f614a0d1ca3fe22a3ccadc8920b1_JaffaCakes118

  • Size

    1.3MB

  • MD5

    0350f614a0d1ca3fe22a3ccadc8920b1

  • SHA1

    78bac9b37aded315ad5ddec7b395b4ff3626f758

  • SHA256

    6456042e622f1dd3148b3cf555dc010a632ab54b7f2f9b9677b1b264d8501eb5

  • SHA512

    2e720d110e0cb813c9c35cd75c432a95931292a8b68ca5ec15af7bcc16fbeb2305ef2f279f62909b96edb3bdf39ef0a9156152983731e1e0f52f26e66ea96cb2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOeF:knw9oUUEEDlGUh+hNM

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0350f614a0d1ca3fe22a3ccadc8920b1_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections