Overview

overview

10

Static

static

10

104b72f5a8...18.exe

windows7-x64

10

104b72f5a8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    104b72f5a8bea58209177abd5b97b4c5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    104b72f5a8bea58209177abd5b97b4c5

  • SHA1

    994d9f4b2d075fe8c04f891893a369d0f1f35c59

  • SHA256

    ccc108bc545618edb895de3573eba75221105cbf4181700279c69cb178e3336b

  • SHA512

    651ba6b2e58081cb5e8a58fca74f84b8d7599f6806cb7a1376c3263283cb2d2598b109fe1db087a55d4eb91507d6c1027761e6c902afc043b71bb39e4ee1949b

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cb8:NABY

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 104b72f5a8bea58209177abd5b97b4c5_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections