Overview

overview

10

Static

static

10

03f50cc0c8...18.exe

windows7-x64

10

03f50cc0c8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03f50cc0c831063b4bbd3b5636e1d883_JaffaCakes118

  • Size

    2.2MB

  • MD5

    03f50cc0c831063b4bbd3b5636e1d883

  • SHA1

    8ca6f085ffbbd68ff14859a1cf44870399025b6f

  • SHA256

    da995451421f0a3f902ad2050a4324df7ec8774dfd63b1a9ed6ce9ef92c36954

  • SHA512

    b1f19e14ec2b5814e5e448c8d7b1c949d23a8340ff26a874f049d18cd4319727fc4f391b15cf81ef5e24a20cb4b41c76e8151f98cc5909ff8eeac63fd6f7568a

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfM:NABT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03f50cc0c831063b4bbd3b5636e1d883_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections