Overview

overview

10

Static

static

10

0dde168099...18.exe

windows7-x64

10

0dde168099...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0dde1680990251ef9da1bb343ce08888_JaffaCakes118

  • Size

    1.4MB

  • MD5

    0dde1680990251ef9da1bb343ce08888

  • SHA1

    965db30ef4b64a49c4f73a05d60c611c034b5b45

  • SHA256

    f31c639a31fd53a620abdc1c29938b0918b5c9cc1af2956d2208076060920949

  • SHA512

    1f4a76d9bce70e1ce04dfa4b6c16bb3afdc14d3896e0b71ad2e340d6cd85fe4e31d1430f274ef82969e79bbe5cb7cd963ed78d1f4a6d7323b1fad96e89f98957

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC4+ugWH:knw9oUUEEDlGUjc2HhG82qwZgK

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dde1680990251ef9da1bb343ce08888_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections