Overview

overview

10

Static

static

10

d491b60073...18.exe

windows7-x64

10

d491b60073...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d491b600732738a15f4ab3dfd083f430_JaffaCakes118

  • Size

    1.5MB

  • MD5

    d491b600732738a15f4ab3dfd083f430

  • SHA1

    7241836b3bddf8487d38d066bfd80834b1ae768b

  • SHA256

    419e91593e5fbbec355fb3d3087c7dac2286eb4129c6587b78ed2913c24aaed7

  • SHA512

    1e57dfa21ca24918cd79ed7d2478b76669efa13be5c6881a42ac748840eaf2193314b8c2f51b1d2c35ac1f145344692544243ab4809f72fad92582346e752460

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIO6zRIhRmuSOVehqHpYlTda+:knw9oUUEEDlGUh+hNg7Th

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d491b600732738a15f4ab3dfd083f430_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections