Overview

overview

10

Static

static

10

0a64895395...18.exe

windows7-x64

10

0a64895395...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a6489539521d37234a94ed4a426798a_JaffaCakes118

  • Size

    2.3MB

  • MD5

    0a6489539521d37234a94ed4a426798a

  • SHA1

    6c5ca11b7be127b075f23ac20e0539fcf193fc39

  • SHA256

    941ee1f65fc3af461f380f5ff8e9a5d8c17e787965ac1a5821de0458e3a9039f

  • SHA512

    80a67307fd79ba72ad7777a3beaffd15c8de73886f40068e9bee7ed477f8a514c0bb1fb9d430e43acc5195316929abf806d1afae8c182a62cad7456e385256f6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTl//Z:NABh

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a6489539521d37234a94ed4a426798a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections