Overview

overview

10

Static

static

10

385ae49299...18.exe

windows7-x64

10

385ae49299...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    385ae4929939e4e55f4fc1d1c8df3d30_JaffaCakes118

  • Size

    1.5MB

  • MD5

    385ae4929939e4e55f4fc1d1c8df3d30

  • SHA1

    a303f42ae156c610a6cc62d9eaff9c96ea0b218b

  • SHA256

    720c3852134f42f153ffb890497760f282746e5449facc6bfdab3fea71878bcd

  • SHA512

    6a345d2964cfeda710f05d653ef146ed08c6678c46d159ab474c0db213c258d85328cec83b594a3b74f548f7a72daf29c0208c3b5d0a006c11cd2572e4eb4a40

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VxjzSRLgxc2Rz:Lz071uv4BPMkibTIA5CJKxe

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 385ae4929939e4e55f4fc1d1c8df3d30_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections