Overview

overview

10

Static

static

10

0616f12a79...18.exe

windows7-x64

10

0616f12a79...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0616f12a79ba0bed7de748b50be7adfe_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0616f12a79ba0bed7de748b50be7adfe

  • SHA1

    baa6d981e73aef35ccb8a9bb3c8fa43cb3224db4

  • SHA256

    c995fe548ef9d4e84cd1b26b067c02792adb0e6b192629c6b2ee01cde6f6eccc

  • SHA512

    45d82379c487a71771a968fab7592c8486e7828f78b30307a5be7d99e6233d4fe5c5ff08f0738670e476e9ccd467f1e45ddd4fb075a079372539a5dcb5bedd49

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl/L:NABs

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0616f12a79ba0bed7de748b50be7adfe_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections