Overview

overview

10

Static

static

10

06dc837a73...18.exe

windows7-x64

10

06dc837a73...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    06dc837a73cc59c6f15b8cea7c1a9a64_JaffaCakes118

  • Size

    2.2MB

  • MD5

    06dc837a73cc59c6f15b8cea7c1a9a64

  • SHA1

    009bce593e19a97666d93b3dbbb1548b4f0f7a1e

  • SHA256

    2aa9aa2e00aa28cecd472461bdcdd1345bef1f5c183cc1fc5de978e313d1bc78

  • SHA512

    59e8a2f9d0ddce6b2d0c13c8eeb26b837df0818c37a6d68a98bc829918ebcec596e8f42b3d6c4da6f5f9b144afc7b133da9589e576426424e47a3f4f6a7f87c0

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrf3I:NABd

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06dc837a73cc59c6f15b8cea7c1a9a64_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections