Overview

overview

10

Static

static

10

00db5489d3...18.exe

windows7-x64

10

00db5489d3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00db5489d3932d6cf319532c97a3c44d_JaffaCakes118

  • Size

    1.8MB

  • MD5

    00db5489d3932d6cf319532c97a3c44d

  • SHA1

    ad9932c26784ec8f7322580b73cf5bf1a2c93fbe

  • SHA256

    2dfdfcf56e3f1aee9759fa233498ed94aa1906ad7bf95983aa63002eb9d586b5

  • SHA512

    63cf20fb1b09e767f408ade1568ccb9188849c1ad0e6a323c401b253ec03bcc753ab0f08da178a4df58d66376c2756082b66a1875d2776c814f4c1dde457b253

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgUE:NABE

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00db5489d3932d6cf319532c97a3c44d_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections