Overview

overview

10

Static

static

10

04f5924eba...18.exe

windows7-x64

10

04f5924eba...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04f5924ebadfa2b24f31b626930c70b3_JaffaCakes118

  • Size

    1.0MB

  • MD5

    04f5924ebadfa2b24f31b626930c70b3

  • SHA1

    1f652ab81bbfae0e444f2142df5b710bfec37474

  • SHA256

    d24f432d64027b2a1ae3e74260c8b1d233cab71cec141ae52b389f550303ad3c

  • SHA512

    ed4dcb3b34148531e13e67732ea041e597f7c45db1ee3144a04b02bed97b4bc40ceb02c55b5ca31ce27f3b5502eeb3e3627aa0e9c4de35d7f4f615ca7080cf5c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQQ:knw9oUUEEDl37jcmWH/xQ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04f5924ebadfa2b24f31b626930c70b3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections