Overview

overview

10

Static

static

10

d036869ea5...18.exe

windows7-x64

10

d036869ea5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d036869ea5060ee161e1bd197c0cf34a_JaffaCakes118

  • Size

    1.1MB

  • MD5

    d036869ea5060ee161e1bd197c0cf34a

  • SHA1

    0b8794eee3c2ed35974fe341d265fb64b47b1564

  • SHA256

    fb1fb8f4276f49f48889a1dcc2b8b79b643d951a77913d92db7d9cee50f8c85a

  • SHA512

    b09bbfafc4424e452670539e105226bf51f24dfee579e08f0df0b5499fe315df51d5ba7fb022ec185a025e4a36d59b609a00855b833909d9ff86bae5f6a11e88

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAYhbcjQrc:knw9oUUEEDlGUJ8Y9cN

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d036869ea5060ee161e1bd197c0cf34a_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections