Overview

overview

10

Static

static

10

0812a9bbd7...18.exe

windows7-x64

10

0812a9bbd7...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    0812a9bbd70566a60889c0da291f08d2_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0812a9bbd70566a60889c0da291f08d2

  • SHA1

    d5f9f9b6572c2866df5fb9cb73fb70c6cb8ee448

  • SHA256

    f0655b2f397e4213a1fa44ee0d9fd27a8b3df1768d3d7d68647554ad5fb5377f

  • SHA512

    1540dd7c801300b8ea98b3d6c70f1cf2b590243f22098e96574b07c6d564a118375cc8c4fe4968b82a50bf2dd835c74af170a64aa0e89fc5b92f5cfc9bf5f76b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOY:NABT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0812a9bbd70566a60889c0da291f08d2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections