Overview

overview

10

Static

static

10

2996dd017b...18.exe

windows7-x64

10

2996dd017b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2996dd017b1ad2bca4c0dc3d1e05d759_JaffaCakes118

  • Size

    1.6MB

  • MD5

    2996dd017b1ad2bca4c0dc3d1e05d759

  • SHA1

    5b1106c3154aa375a61525616356e74bd7281eb8

  • SHA256

    e18e887585814371e7bde49a407173f8b267496885c75193022ef7ff87bd8226

  • SHA512

    b03374725198f92c28b52a0b52add0a7fbb808ca8cb40b01fc2d4d8b8f69656ed516c4d6757287f6bbec8179ef13c56697b464f8e50a1fc2a334366fc07cc022

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUg55TfbA:knw9oUUEEDlGUjc2HhG82DiLNU

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2996dd017b1ad2bca4c0dc3d1e05d759_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections