Overview

overview

10

Static

static

10

00c065485b...18.exe

windows7-x64

10

00c065485b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00c065485b83c647f9a0d6b65a3858d3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    00c065485b83c647f9a0d6b65a3858d3

  • SHA1

    0c9e72c8b8085350cdd7b941f453beebe008c6eb

  • SHA256

    b29e1adec856496e17028172c434c93eb4a6d0efd8fbe3a8abbba493be0e1c5e

  • SHA512

    a3c98a735daf2cef5ad5fc10782ef8fbdffeaecfbb950a8586d1147d4b78ef036d989096de6a5c0003a58af58ee09661d862f98e203bb619381fceab821c5004

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cv6:NABq

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00c065485b83c647f9a0d6b65a3858d3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections