Overview

overview

10

Static

static

10

03e246af56...18.exe

windows7-x64

10

03e246af56...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    03e246af56b0d492c1f7902996f395a2_JaffaCakes118

  • Size

    1.5MB

  • MD5

    03e246af56b0d492c1f7902996f395a2

  • SHA1

    f94c360184c2db864374d7bf0b72af34cabdf393

  • SHA256

    d145d89d3b0d44e812d897971d9bb2e42a551cb3d7fed195d32e2b3c50b2dd63

  • SHA512

    d214b82aef8477cfe71e270bc68cd5116697165247f3366058ebfff03d88fee51e517f44e9807f8dd9c99f0942cd13adebc513e521ca64e50b33472479382f2a

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPIC42AsKL/KXvqqk:knw9oUUEEDlGUjc2HhG82qw77cqF

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03e246af56b0d492c1f7902996f395a2_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections