Overview

overview

10

Static

static

10

17a9f3885c...18.exe

windows7-x64

10

17a9f3885c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17a9f3885ceafb72b8db2e2559d1f706_JaffaCakes118

  • Size

    2.5MB

  • MD5

    17a9f3885ceafb72b8db2e2559d1f706

  • SHA1

    8b62b21a3c5586d79c94525210d0c83f7896f3c6

  • SHA256

    4f944f4a22fcda4091a0fb2fc25b5c07e4636e64fe100a7ce566010ee1e5116f

  • SHA512

    7480335e5074fb5c2ae5d038a974054e05b78461300d865ce942131d620f9a2f7cad2588f47282cda3c4181b5b99d7d6975624e91ec152246fe8173afb7feefd

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTKUANMWASrdWm:NABe

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 17a9f3885ceafb72b8db2e2559d1f706_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections