Overview

overview

10

Static

static

10

409ae83be3...18.exe

windows7-x64

10

409ae83be3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    409ae83be3f0320f1ba5667066f3766d_JaffaCakes118

  • Size

    1.6MB

  • MD5

    409ae83be3f0320f1ba5667066f3766d

  • SHA1

    b05c034dc9e811dd8878088970b7724cc5310d28

  • SHA256

    c143f790643f4c061c37d903247dce5bfc5c1e0b56c5fb4c2be81abbe9eab6ac

  • SHA512

    c25c2e8b5f9b25dfb6e7c3e89bd53d8fb860b025d10916afaabe22650da365e0b08ed2d82da1e25beafb5f4bc4e50340b2e777232b0171a6647e019c4833d67e

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2Do+BRrCfUgSav83:knw9oUUEEDlGUjc2HhG82DiB+

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 409ae83be3f0320f1ba5667066f3766d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections