Overview

overview

10

Static

static

10

0b5043ff2d...18.exe

windows7-x64

10

0b5043ff2d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b5043ff2dda98a2b71d7a7ae9a7fc81_JaffaCakes118

  • Size

    1.8MB

  • MD5

    0b5043ff2dda98a2b71d7a7ae9a7fc81

  • SHA1

    1d26806180535480b8684704130a6a467d5afa84

  • SHA256

    bf9b2591d780fc07e99a5ee0e0ef730aac835b2e847e1bd829087b6d45295ff3

  • SHA512

    4149a984f31a813ebf8f82df8eac7c89cafe3a13d374694977c41979c56672d4c188ca1282d6fec0088ee4303216c4f49f9ed74186910357a9a9abc912c1af56

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlB:NABs

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b5043ff2dda98a2b71d7a7ae9a7fc81_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections