Overview

overview

10

Static

static

10

05094e8980...18.exe

windows7-x64

10

05094e8980...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    05094e898049495a8bfac87deb163213_JaffaCakes118

  • Size

    1.9MB

  • MD5

    05094e898049495a8bfac87deb163213

  • SHA1

    1bb6ae3e1c6c9becc5facfb8ccbfd429f9998978

  • SHA256

    0bdcbfbafe9140af55406d3d98d4139455f0a1b06d2feac26716f010cce640b7

  • SHA512

    e0a4e4e0d7f9887814e4993e97b40faae28d4dc8510cac7e4985c48a61b22078615c31e2269c9d56ca7a2ee21076d8d76ec51d83cb1259b9cc56487520fc5ca6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOT:NAB4

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05094e898049495a8bfac87deb163213_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections