Overview

overview

10

Static

static

10

04e8a4e639...18.exe

windows7-x64

10

04e8a4e639...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04e8a4e6395ba0e7cd04938765e50b28_JaffaCakes118

  • Size

    1.4MB

  • MD5

    04e8a4e6395ba0e7cd04938765e50b28

  • SHA1

    dcb13d0c5eb09b29ee1b4854093f4b418dfc2fde

  • SHA256

    45d7da8d95304792598d3408737ace56d550f3d046764b387c55bce82913011e

  • SHA512

    32088ac69313d1df665b5a10167041963aea98cb27525ed010d3760e018dae77da9537f72e55ce0ec6c8b1709024029b0a94c6e35b696becef711391ccd57cf2

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC4+f:knw9oUUEEDlGUjc2HhG82qws

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04e8a4e6395ba0e7cd04938765e50b28_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections