Overview

overview

10

Static

static

10

0f5b64aa42...18.exe

windows7-x64

10

0f5b64aa42...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f5b64aa42d1e6bd141a726ad2688140_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0f5b64aa42d1e6bd141a726ad2688140

  • SHA1

    c002a3170d3b2c824f873572ec1172d3a4524772

  • SHA256

    270b84696718935ca55f0849706a77a88495e9003b2dd7e4a932360d0a0c825e

  • SHA512

    5908300ad7a36a2c7c6920c87e2ae2bf7b9f259f66d2957cd55fbdb7a7a5cb9e39f3d232b6ead73b3285e0d6d0a74234d70ae5e9dbb122c71495f1d2ddc92afc

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qr8+PDR:NAB+

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f5b64aa42d1e6bd141a726ad2688140_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections