Overview

overview

10

Static

static

10

38f70ac1cf...18.exe

windows7-x64

10

38f70ac1cf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    38f70ac1cf4072da6e340dc50012596c_JaffaCakes118

  • Size

    2.3MB

  • MD5

    38f70ac1cf4072da6e340dc50012596c

  • SHA1

    180dcd4b8d02db621886ccb7f038635341d545c7

  • SHA256

    af647f7792cc76974d8016eb25b303c41281f166c29af268a2fb5d6c9af409cd

  • SHA512

    30af5f95ed4f43d470046b311cb5057455c3ad515dcb93f72323be55d0250629ba42629e2937c16fc08c5bd51de79d222a14edc9b9de5e6fbbf3a0531e1136d6

  • SSDEEP

    49152:hQ9evMHpoXybxyU+v+C6b+mRE2bNnWe1gzRO0lPDbR:goylP+v+LjbNWmNY

Score
10/10
minervmprotectxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38f70ac1cf4072da6e340dc50012596c_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    57a51372f2ad4cddb506c351c2784d43


    Headers

    Imports

    Sections