Overview

overview

10

Static

static

10

394c42b6ea...18.exe

windows7-x64

10

394c42b6ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    394c42b6ea51bf27729311e1f432bd9a_JaffaCakes118

  • Size

    1.1MB

  • MD5

    394c42b6ea51bf27729311e1f432bd9a

  • SHA1

    e68f068b627e1a160616e63c7e73c3b315b3ac67

  • SHA256

    f9423edb52abde413591831ae684262469062a710a75cb33268ed45709ebb2e8

  • SHA512

    bfd40eacbd19095cc4329699647b89ec79bca38757d28a5b58c1a83caad2dd883ccd40a2d21d73a9566e66818bc03dd87faf8aa4b093fcdc318782b11c7d8da4

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytOFE:knw9oUUEEDlGUrMNt

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 394c42b6ea51bf27729311e1f432bd9a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections