Overview

overview

10

Static

static

10

005179830a...18.exe

windows7-x64

10

005179830a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    005179830a38e193b71109939ce9bcf7_JaffaCakes118

  • Size

    1.2MB

  • MD5

    005179830a38e193b71109939ce9bcf7

  • SHA1

    e5e739eb200910f9e7a321bb23b03b9949afe7c9

  • SHA256

    105bdbd395ceb1521101ab032345aea65af6dc0a5da4726e530d2d88ed02701c

  • SHA512

    efc520dddbec98352cb7dbf443aee8c32483b0445ef74f9cea6062cb6be84a8ead7782342abc837a1d28aa51a7ab6b3f70f9ba97e63e03950d3bafcadf140751

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zjP+sjI1P69ry:knw9oUUEEDl37jcq4nPU

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 005179830a38e193b71109939ce9bcf7_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections