Overview

overview

10

Static

static

10

1589e82c20...18.exe

windows7-x64

10

1589e82c20...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1589e82c20e94c8a3dedbb8831f473f1_JaffaCakes118

  • Size

    920KB

  • MD5

    1589e82c20e94c8a3dedbb8831f473f1

  • SHA1

    e2f612cdf5381e0b7b51094fd6767c632ed8c56d

  • SHA256

    6a2e0efcb0a5404972421f2d571e708a627f65b2dd328253078942d1410b61fe

  • SHA512

    7a371209ac65809661dd70482d37e101e6ca0cc1fbfc73c9addda81e48ddc0016db62b7ec49fdf31cf9a738d61c5615476a849ba6281f91181eee0a255dd76eb

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOqzJO0Rb8bh8c:knw9oUUEEDlOuJhc

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1589e82c20e94c8a3dedbb8831f473f1_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections