Overview

overview

10

Static

static

10

0b649a2506...18.exe

windows7-x64

10

0b649a2506...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b649a2506ea24bf4de64efe8f5f7fe0_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0b649a2506ea24bf4de64efe8f5f7fe0

  • SHA1

    0d3f3680ea34fb77a427e472295d1d78d4bca638

  • SHA256

    c91debb8d02c3c7ae39bad3460c7bf652eb4a79c3e2a736ac89688d7d302101b

  • SHA512

    4c1eb07c70a1cb7ab24e86c5c64dded033c4ab7e1c6f9ff972b433c47ec725a8c3844986ca5c51901981d8c6a6217cedb91a8fede88f05f11fba37a8017e2089

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U1n:NABO

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b649a2506ea24bf4de64efe8f5f7fe0_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections