Overview

overview

10

Static

static

10

16aa91494d...18.exe

windows7-x64

10

16aa91494d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16aa91494d59dc842826698cb10a28f3_JaffaCakes118

  • Size

    1.3MB

  • MD5

    16aa91494d59dc842826698cb10a28f3

  • SHA1

    72847d5596f08731ad2505b9d0f88d9e6fa946f7

  • SHA256

    411368d83b7c928b6a8d21730d7cd659dd7ecf3f86a9e73049f77aa157a40ee0

  • SHA512

    02fe6c9f81f3f82919366912398a174e6799e624069ce2c32cfad2553f31cbd727db8572c173f0cfe1a330907daa57e5c73e34bda3a43a6c0b16e5bb60565ea9

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSO9KS:knw9oUUEEDlGUh+hN9H

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16aa91494d59dc842826698cb10a28f3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections