Overview

overview

10

Static

static

10

007a637937...18.exe

windows7-x64

10

007a637937...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    007a637937e6b330873d704fe4aa15e6_JaffaCakes118

  • Size

    1.5MB

  • MD5

    007a637937e6b330873d704fe4aa15e6

  • SHA1

    03a05569feefc75bc26e7bd50a6fb4eb1f25b67b

  • SHA256

    082cf71447509df919fa7b03b80103f1df23c8a75002bdb71f3a86517ebb0489

  • SHA512

    1c5589f1967a2500a27320c1dc664f92bc52d4f86a5a3e64273a717976b34e14d15bb84c356c39bff42a39794b4e57d4fc577fd5dbebced440e881fe2ecad745

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOgDls/HDy4JAgR:knw9oUUEEDlGUh+hNFetm

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 007a637937e6b330873d704fe4aa15e6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections