Overview

overview

10

Static

static

10

04095c390e...18.exe

windows7-x64

10

04095c390e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04095c390e3933530fe7c82332d476b5_JaffaCakes118

  • Size

    1.8MB

  • MD5

    04095c390e3933530fe7c82332d476b5

  • SHA1

    9170c517adffd70406a7ef4bf0ef69f48a73d21b

  • SHA256

    13e21764032052fb44a9a221939726183f69e8abb066c11fa66a43903deda0bc

  • SHA512

    2c25700aa5e537d4131e4a088fff7999097041e4963418c073471efef3c160bbcc48851037ecdf8d81bb00ef51b3e9ccc38d99cb784bbc5301176e591059165b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOI:NABD

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04095c390e3933530fe7c82332d476b5_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections