Overview

overview

10

Static

static

10

cff3e8ea81...18.exe

windows7-x64

10

cff3e8ea81...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cff3e8ea816569c288dc0bf8642f6d19_JaffaCakes118

  • Size

    700KB

  • MD5

    cff3e8ea816569c288dc0bf8642f6d19

  • SHA1

    ed517b0d57a2a29e2165d852cf45293a5d606908

  • SHA256

    0a6b1f13e457180bee08649549ae00db7b16efbbba9a56afe6617f003192e3a6

  • SHA512

    210eef8d93680574967b5df2464b2a13881050154259df5e8a992bb2dd4fb7a62164862b5486f6fe37151dea448724d6ba51c8b11ab07849a0990510049d56af

  • SSDEEP

    12288:ba268qgPTFE1QzqxMES+GYPnBGPwD3PEuNl4tsctmDd8w89cWvRFRUBDmtM2zmI7:b368PxE1QmQ+gwDfEuD4tsymB8w87umT

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cff3e8ea816569c288dc0bf8642f6d19_JaffaCakes118
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections