xmrig | 8b8bcf27ae8810bb4e8f7b2f541f4939_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8b8bcf27ae8810bb4e8f7b2f541f4939_JaffaCakes118
Size

1.4MB
MD5

8b8bcf27ae8810bb4e8f7b2f541f4939
SHA1

0d54b3ab16fce0c5a034ad11fdccc45c9ce1c97f
SHA256

0ed5e709062b190bfad8751bebaed211832e3a0f72a9660995ef7cdc0c0dace5
SHA512

62a8b8f0069b85e6558b4285aa54208137aad840f3c47f663fa25c7076ceeb5f9da75902026e0c4f404e2fd07d893c14af838c7d014dc70dc7f467833f3c71f4
SSDEEP

24576:7xOtGsY7Ds5tq2sxsOODRR3J9lzxGYH1xe8bbrtDf/mN8I3LCRO7SmWN/A:7xOaD0rsxsO0RR3J9lzDxbbr9/M38

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b8bcf27ae8810bb4e8f7b2f541f4939_JaffaCakes118

Files

8b8bcf27ae8810bb4e8f7b2f541f4939_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

MHD_add_connection
MHD_add_response_footer
MHD_add_response_header
MHD_create_response_for_upgrade
MHD_create_response_from_buffer
MHD_create_response_from_callback
MHD_create_response_from_data
MHD_create_response_from_fd
MHD_create_response_from_fd64
MHD_create_response_from_fd_at_offset
MHD_create_response_from_fd_at_offset64
MHD_del_response_header
MHD_destroy_response
MHD_free
MHD_get_connection_info
MHD_get_connection_values
MHD_get_daemon_info
MHD_get_fdset
MHD_get_fdset2
MHD_get_reason_phrase_for
MHD_get_response_header
MHD_get_response_headers
MHD_get_timeout
MHD_get_version
MHD_http_unescape
MHD_is_feature_supported
MHD_lookup_connection_value
MHD_queue_response
MHD_quiesce_daemon
MHD_resume_connection
MHD_run
MHD_run_from_select
MHD_set_connection_option
MHD_set_connection_value
MHD_set_panic_func
MHD_set_response_options
MHD_start_daemon
MHD_start_daemon_va
MHD_stop_daemon
MHD_suspend_connection
MHD_upgrade_action

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 78KB - Virtual size: 78KB

.eh_fram Size: 136KB - Virtual size: 135KB

.bss Size: - Virtual size: 6KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 9KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 56B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 27KB - Virtual size: 27KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 78KB - Virtual size: 78KB

.eh_fram
Size: 136KB - Virtual size: 135KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 9KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 56B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 27KB - Virtual size: 27KB