Overview

overview

10

Static

static

10

0475b3af27...18.exe

windows7-x64

10

0475b3af27...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0475b3af2752d9d39666b946ccf8fb50_JaffaCakes118

  • Size

    1.6MB

  • MD5

    0475b3af2752d9d39666b946ccf8fb50

  • SHA1

    ef1df1c3f9a4316cfc36c119078cca4fcaa77b33

  • SHA256

    5e43d859989c0be553d6d9a2559e591058423ae717d0dc2b5d7dd325c6805628

  • SHA512

    31117ca09db29b6f91092837654ed5643852150b703b5db819e1d83fcac2b5c4166dbbbcca702575a061c273b6596a1846b6420d489d6c96bd30cf117dfac843

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUgSav1Z:knw9oUUEEDlGUjc2HhG82DiBT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0475b3af2752d9d39666b946ccf8fb50_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections