Overview

overview

10

Static

static

10

00f679eda3...18.exe

windows7-x64

10

00f679eda3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00f679eda36f61de1f399c824afa78f7_JaffaCakes118

  • Size

    1.7MB

  • MD5

    00f679eda36f61de1f399c824afa78f7

  • SHA1

    561b2e9ab3a75d3bcfb86fb0309065f8222afb9c

  • SHA256

    1ad2501b7e485e1dd1ae0a7e45772c11577f070a22f8174f3bcb18a6573915ab

  • SHA512

    65d128a53a60d8c9b6bde5100cec3b605b4e0aabb1c900cab337233e556f88c588e66703adaf42b27d7f76aa0f97a4d02f4eab43f81bc112c7275ca82473c5ef

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtt:Lz071uv4BPMkibTIA5I4TNrpDGK/c

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 00f679eda36f61de1f399c824afa78f7_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections