Overview

overview

10

Static

static

10

1f476cc395...18.exe

windows7-x64

10

1f476cc395...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1f476cc3955010cd6c82a407b6d0a99d_JaffaCakes118

  • Size

    1.4MB

  • MD5

    1f476cc3955010cd6c82a407b6d0a99d

  • SHA1

    323488cbc1962ee6e8607db4616ca6e0744d9bd5

  • SHA256

    82352ef695bad0555e2144e9b861727b49a027eb8eb66f2403beab467311d540

  • SHA512

    b2d2bf7266ced0ee38836c68d6b089a0a75aff2591aed570624d9bbab7ae91998a686ae07f050e5cbe7c6833d4b6ff3c87d47c1318a4a17e0e7bbbcbe1538588

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPw6:Lz071uv4BPMkibTIA5CJJ

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f476cc3955010cd6c82a407b6d0a99d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections