Overview

overview

10

Static

static

10

089835262e...18.exe

windows7-x64

10

089835262e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    089835262e491f7a54d877f29a69f504_JaffaCakes118

  • Size

    1.2MB

  • MD5

    089835262e491f7a54d877f29a69f504

  • SHA1

    088081714945c332b5d67a83a63e78c6c8984d84

  • SHA256

    59f27b258d0378c1f70c809ff5c238f065ba474a3d8dbe93001421866c194bda

  • SHA512

    face48e2790dc66b00866301f71916a26a74e134c3b6f0b43cd9cf8b627e37f7f2f171d0e5c2ca1a4706d7c197711ab38a591ae2181f57617e2936a7f9c0ee18

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTTXzoM01g:knw9oUUEEDl37jcmWH/Ijz

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 089835262e491f7a54d877f29a69f504_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections