Overview

overview

10

Static

static

10

2a70971480...18.exe

windows7-x64

10

2a70971480...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a70971480bb830643dbebfd39e24e1a_JaffaCakes118

  • Size

    1.1MB

  • MD5

    2a70971480bb830643dbebfd39e24e1a

  • SHA1

    e862ff2575dd02e67b753e83d14aa8a4bd8cbc43

  • SHA256

    e332ece09f93765c856fa69be42cb9bce12344be04e0446354195da09bf8b2bf

  • SHA512

    df2870cca0b7e2733f5cb6f1254ec9662e0cf211ea6e63cce4ff4b9fe551a7c0a9294b43dae64750d8ddae7324bc566c5f38843193f2c8effb1eb9ed2e69eced

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytOF3:knw9oUUEEDlGUrMNo

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a70971480bb830643dbebfd39e24e1a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections