Overview

overview

10

Static

static

10

0a28a16435...18.exe

windows7-x64

10

0a28a16435...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a28a16435a696eba1a4a80bfa10fca3_JaffaCakes118

  • Size

    1.2MB

  • MD5

    0a28a16435a696eba1a4a80bfa10fca3

  • SHA1

    499b5a032a31a8999fdbe22a6c650a8b2259b3bc

  • SHA256

    bb61cac3120a117954d1981111fdc9330025093b5df7fb3023791ffbf6ca22be

  • SHA512

    c85d83a849cb6710538297690e7c64834779e91aae436d8c8ba14bbd532e5e2bf7770025830108e6772c74da9fd07b149ea2f59d54133d6e06f60115fc19ad46

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1co2:knw9oUUEEDl37jcq4nPN

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a28a16435a696eba1a4a80bfa10fca3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections