Overview

overview

10

Static

static

10

16ad390bb6...18.exe

windows7-x64

10

16ad390bb6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    16ad390bb628115b8d48d3f334fcb8de_JaffaCakes118

  • Size

    1.0MB

  • MD5

    16ad390bb628115b8d48d3f334fcb8de

  • SHA1

    c48205cfebd7cfc92da7589bf7e9744c0e854cb0

  • SHA256

    83257b341b96c4f15aa48750eea424761ab22b5ecfb1dc2fc61b3f8f04c8c86a

  • SHA512

    7dbee7a6684b7df2abe6ed611bde782e048b2440bf25d6c7ba851ae57a91fce9f8ce8eac03b9f445ef4c7068a95a20f8f6d46639dd1fa167db696aa767319d50

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPl+Me7bPMS8Ykgc38Nvy6QJ:knw9oUUEEDl+xTMS8TgpN6h

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16ad390bb628115b8d48d3f334fcb8de_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections