Overview

overview

10

Static

static

10

0211dc3881...18.exe

windows7-x64

10

0211dc3881...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0211dc3881a3f6a7cbb1f66414e9a6d2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0211dc3881a3f6a7cbb1f66414e9a6d2

  • SHA1

    6328f89f7659cbde52ec42bc6f34bddb09a8c070

  • SHA256

    a3032e3b43add7f2b3c93055bb070533eea13681b5637558c5562fda49a05e14

  • SHA512

    7e23b22c1a1babc9cdac4fd22c01c1ed70d8404820c4f1ddcd8b091d8f4cc3be82081c16bacba816cc0b33dd64cd5538508618a65ce30d342b0384d42c363e8e

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9c9b:NABN

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0211dc3881a3f6a7cbb1f66414e9a6d2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections