Overview

overview

10

Static

static

10

05c5839d68...18.exe

windows7-x64

10

05c5839d68...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05c5839d68630f0ea9f6def693972ec2_JaffaCakes118

  • Size

    1.2MB

  • MD5

    05c5839d68630f0ea9f6def693972ec2

  • SHA1

    aff1774a2c6ba1c9876e062ae1304ae2d6a4d446

  • SHA256

    e022ef735f51e0559aa3889648b8b900236ab37e86a9109b05f1952a5d9d024a

  • SHA512

    48314c8946ffd7810745069e77fc3f2ea9c7bac881047060a6b11ae22c51b971a8f4c8d5840a8aa4425b36c907e90e7fa012cfd0e848cd53049b73588373e8a6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTQDm3V6Gdx3wZa:knw9oUUEEDl37jcmWH/xDSb/3F

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05c5839d68630f0ea9f6def693972ec2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections