Overview

overview

10

Static

static

10

489f12aaf7...18.exe

windows7-x64

10

489f12aaf7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    489f12aaf71cb1775af34013d9eeaa0a_JaffaCakes118

  • Size

    1.3MB

  • MD5

    489f12aaf71cb1775af34013d9eeaa0a

  • SHA1

    3633b4999b68313c40b2fc3e0cf2cbe5f9bb04d5

  • SHA256

    4f36ee84fec621a47e88eced6b833f81d3d1608cec082efd1b22ec0cea82729a

  • SHA512

    3752d1791fdb0c33125b6377696e66fbd7e05f5e7db3b1ffa915495b680009e1b6a06a969c8129a99cdcf1db05326610526b2c9ec7deabb39d74f66fa1743723

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOpuRqy:knw9oUUEEDlGUh+hNuqy

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 489f12aaf71cb1775af34013d9eeaa0a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections