Overview

overview

10

Static

static

10

058691225a...18.exe

windows7-x64

10

058691225a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    058691225ae42f189d6f3702814fb4a9_JaffaCakes118

  • Size

    1.6MB

  • MD5

    058691225ae42f189d6f3702814fb4a9

  • SHA1

    0b03972097e41e402a1087be2ad70f9f174628d3

  • SHA256

    8e9368d0a237be837b96aacf2fde2beceb77ee9a781219146348b8535d5b0707

  • SHA512

    c2c9984b2d1856c1b8da9d042b4734141e93dff5ac15bfb628d7dcb8cd2c7c39afa55bb2348c1c04734a969265c32266786fc9a179b83fad3d9f293c9f4b960c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfULQ3873o:knw9oUUEEDlGUjc2HhG82Di1

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 058691225ae42f189d6f3702814fb4a9_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections