Overview

overview

10

Static

static

10

1f9e489be0...18.exe

windows7-x64

10

1f9e489be0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1f9e489be03a98d7005810aae015aae3_JaffaCakes118

  • Size

    1.1MB

  • MD5

    1f9e489be03a98d7005810aae015aae3

  • SHA1

    22978a71b3141841b175283471f61be851f72b1c

  • SHA256

    1eff0e387b1ed51d33731f9a0d37020690dbada3a75aac99075fc4641449d8b9

  • SHA512

    678bf1a0059b0615dd7264ea2e7898bfcde7e95dad4ea5008fc29419616a1536c90dc76b749ff3876660b33c64ec2dff3eea728b0aea4c7cea6a7586e195db9a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/DFNkTF8t2oG00:knw9oUUEEDl37jcmWH/I5J

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f9e489be03a98d7005810aae015aae3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections