Overview

overview

10

Static

static

10

0a973bb0a5...18.exe

windows7-x64

10

0a973bb0a5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a973bb0a5dcd10f6fad3923f8360840_JaffaCakes118

  • Size

    1.2MB

  • MD5

    0a973bb0a5dcd10f6fad3923f8360840

  • SHA1

    48de9335fe1354b080c6c183a466755a72e0094c

  • SHA256

    8fdc15839a6e347d60c8e1632730a12d194ab67afa35941de7fe401012d2a440

  • SHA512

    e372914da89db0d17f551672333bcd3e56be5527128bb7ae8f06eceb7c8e26118f07c7f94c14f6e56cb57290c4e3a4e03a5b93f3efd394340bb298024e1df64b

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1G3:knw9oUUEEDl37jcq4nP1

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a973bb0a5dcd10f6fad3923f8360840_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections