Overview

overview

10

Static

static

10

06c56a6d34...18.exe

windows7-x64

10

06c56a6d34...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06c56a6d346186f50aa7dc813c26dedb_JaffaCakes118

  • Size

    2.3MB

  • MD5

    06c56a6d346186f50aa7dc813c26dedb

  • SHA1

    9b6482eb5194012964f0d246df25eaf1a8d475d0

  • SHA256

    e2ec00b8eab9f6ad6b7f9aa60433e279221f66f19bd3cff173509ab8f15de524

  • SHA512

    3d53442edaffcd90be88a61d5c2c3f1202f1785921dc0de6f7d38352dba3b7918a312e24aa44ca6b2956ed81283d939b0c32de2e9a12daf28b7c7a8fa0825cc6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//aDs:NAB3

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06c56a6d346186f50aa7dc813c26dedb_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections