Overview

overview

10

Static

static

10

04980e42fc...18.exe

windows7-x64

10

04980e42fc...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04980e42fcf3ca7f6cc0dd6471060dea_JaffaCakes118

  • Size

    1.6MB

  • MD5

    04980e42fcf3ca7f6cc0dd6471060dea

  • SHA1

    16332ceb0494ed67babc5212449c632ef683d184

  • SHA256

    cf51f43d22f0f26908c32bf5986a630ebc5e4d5ddf17ee5bd77706411ac7cd5b

  • SHA512

    b7b96955bd90f0eaf7a1054c4a86a8cdd1161c12cc0611d43ccaf7a9fde33f1f5cd97605d7126179b2bb8486da9b83934151927d19ba91e55ba5d189e3bbe9fb

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULQ387Os:knw9oUUEEDlGUjc2HhG82DiQ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04980e42fcf3ca7f6cc0dd6471060dea_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections