Overview

overview

10

Static

static

10

056cff4836...18.exe

windows7-x64

10

056cff4836...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    056cff4836297a4fc8a7021a2181249f_JaffaCakes118

  • Size

    1.2MB

  • MD5

    056cff4836297a4fc8a7021a2181249f

  • SHA1

    5852829b269722e10e433cc3e3f3462fd83024d3

  • SHA256

    94ed8651f7b7bd09caa2c5cacc7ae275bb1531caeedbc13352135d613b7bed4b

  • SHA512

    234f4a164efdd4c89282a921091db4755a3d3cb1f49f30ee97dc9eb73427ac01b26dd270340914d1de30c1bfd8f552db1b15b253b5828ed8559543bef4d597c8

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1qi:knw9oUUEEDl37jcq4nPk

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 056cff4836297a4fc8a7021a2181249f_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections