Overview

overview

10

Static

static

10

0fbe398302...18.exe

windows7-x64

10

0fbe398302...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fbe39830268db603a63bf914300e3fd_JaffaCakes118

  • Size

    1.9MB

  • MD5

    0fbe39830268db603a63bf914300e3fd

  • SHA1

    bc6ecde740bd01b4273ed455d9cc56ee75a9fe4f

  • SHA256

    a2547667bda0eacf845beab0fc5056fbac7fe1be63ccfdb3326c50c3bff0490d

  • SHA512

    de100e27c86a90a69ab0e7896a4c6ef27b61f44cc520edf761f1be2b2bb1f9b428ca6fa9238d748672cd382169dba19c6cfb0f16209c5a090770e7e9fcf33c49

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U101:NABV

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fbe39830268db603a63bf914300e3fd_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections