Overview

overview

10

Static

static

10

0639c9ff39...18.exe

windows7-x64

10

0639c9ff39...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0639c9ff3908c347ae85ab950cd00826_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0639c9ff3908c347ae85ab950cd00826

  • SHA1

    c60fe372625d5889c7f0efe318a4741c3dcd895f

  • SHA256

    f6015353a685f7eccb6293f42c6a05ec4eac529d47323f5825a603582d9f58b3

  • SHA512

    8834bb3c837603d6e4ef4d31176f35dd9f3c261c0b8be297743560edc6e1831fadeca629c350a8f2e770c7934c14d827de7c4eb08a8a104dc3bb4378ab44999a

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOfu:NAB7

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0639c9ff3908c347ae85ab950cd00826_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections