Overview

overview

10

Static

static

10

04bf4895ec...18.exe

windows7-x64

10

04bf4895ec...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04bf4895ecd8836c2d6d99f859ffc8a6_JaffaCakes118

  • Size

    1.3MB

  • MD5

    04bf4895ecd8836c2d6d99f859ffc8a6

  • SHA1

    469ac88e01b9aa21ccfbf88eb6949282f4e9ebff

  • SHA256

    0c8a4e65cb75c5622caea1d15304863648347983c3759ae2fcf103e8fa94a3a4

  • SHA512

    6b340cbe353348a4ebbea9238772cadc7bc71d2ca7a4dc36bd761401e37615f796a83b08e386381f7f8a56d9c6e1255c4de0fa26af24ead75b3bc3c8935a7b60

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOG8C:knw9oUUEEDlGUh+hNGR

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04bf4895ecd8836c2d6d99f859ffc8a6_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections