Overview

overview

10

Static

static

10

0b481195d7...18.exe

windows7-x64

10

0b481195d7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b481195d7b3227233a92fa6966de442_JaffaCakes118

  • Size

    1.7MB

  • MD5

    0b481195d7b3227233a92fa6966de442

  • SHA1

    9227323c78ac376ae812f27f4c6afbef157e2fc6

  • SHA256

    af32435783f5912fa074c7d63eca9495e5fce084d10dfeebcb3cae328b7e6a27

  • SHA512

    6889a11d079b9ec3c97b3e0543d16d730e43de4a09d91cdf9b528a2852167c22fb09efaab70cde27c30386bb42e7b3449c9016386adc3570a6778ae375d17110

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGgDQBlkp:NABW

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b481195d7b3227233a92fa6966de442_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections