Overview

overview

10

Static

static

10

a1889b5380...18.exe

windows7-x64

10

a1889b5380...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1889b5380121ccf89c922560174ccf4_JaffaCakes118

  • Size

    1.5MB

  • MD5

    a1889b5380121ccf89c922560174ccf4

  • SHA1

    b795a75a26fc6ae5b7b04c955625e6aa28803f75

  • SHA256

    5a3a25c50298e3282451bca943e52371e621bfd1af43be85d8f5e6abfc5295e8

  • SHA512

    361c99041d045684ce980e8b5e59da5c5eb42ca5b160c5cce757303d4fb88c053f81aeaab91a09c5f632198593f228530412fddafcc667f8d33ee8e871dacb6c

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOVehqHpYlTdn:knw9oUUEEDlGUh+hNg7Tp

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a1889b5380121ccf89c922560174ccf4_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections