Overview

overview

10

Static

static

10

04489f0ca8...18.exe

windows7-x64

10

04489f0ca8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04489f0ca816b302863ac10ab9ab4f15_JaffaCakes118

  • Size

    1.4MB

  • MD5

    04489f0ca816b302863ac10ab9ab4f15

  • SHA1

    08288f231a9b6199df73e4cc3b76f8c928f1d5c4

  • SHA256

    742f8db386d595ef211287a1efb5564f39cb329667f788f3599282ac78ff3d07

  • SHA512

    dfa12e679afbcd2e2713d976cdfe3d5b8e3d2434cb7271ca042f9543259db512393c07055ab0600dbbcf36b2b92776e80101f814414fc06cedd42d773db2a518

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO9C1MKTbcMfHhGjw2qPICr:knw9oUUEEDlGUjc2HhG82qwM

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04489f0ca816b302863ac10ab9ab4f15_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections