Overview

overview

10

Static

static

10

1216c391e2...18.exe

windows7-x64

10

1216c391e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1216c391e23e9ca18b09d3d3480033b4_JaffaCakes118

  • Size

    1.8MB

  • MD5

    1216c391e23e9ca18b09d3d3480033b4

  • SHA1

    17ad44275ce26f9adedb6f25fa7bf6c08e829e01

  • SHA256

    3ec34a312aaa6105be8c105bf64e38ae88927f5d105b1ac6c059049fe5f6ccfc

  • SHA512

    34f098da0ba62bf775b2d1d91f02bf224088864acb4fd7db241583e835dc801ec3aeb0da96a2ea563494c999d8195820e6fdef1d62d80992b80b6e8d37ea1ad9

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlW:NABN

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1216c391e23e9ca18b09d3d3480033b4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections