Overview

overview

10

Static

static

10

04a695ea3f...18.exe

windows7-x64

10

04a695ea3f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04a695ea3f93ddd16970b2c3c2465a4a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    04a695ea3f93ddd16970b2c3c2465a4a

  • SHA1

    0eb5673ec64ecc1ae423129c6e59cd98d2421625

  • SHA256

    072f171e16c60a8f4777a5172de8aabe9943b37f9a087163cae370d03d24c25f

  • SHA512

    45bb5a8a96b467f4fd5ce5c97a171284b56bc63a5bc8b83f43d082aba5c4de8a9b6376fe784c119260febb4b3ddd0e4e67bedb36a9e2072a3a5b30ec75d8f7f1

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfou:NABU

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04a695ea3f93ddd16970b2c3c2465a4a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections