Overview

overview

10

Static

static

10

d5067923f1...18.exe

windows7-x64

10

d5067923f1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5067923f16d8ed7437cbb7ed1057407_JaffaCakes118

  • Size

    1.0MB

  • MD5

    d5067923f16d8ed7437cbb7ed1057407

  • SHA1

    4aef6eee6b2be1874e4a8e5f25a734e6bc28592e

  • SHA256

    fc8892a407b6fd1b385c32c5e20348ee4e628512b504c276f24ca51312515479

  • SHA512

    aa3b1ed63971b20acb2705743f925d5f615a2351d4c259a13de981ad05b80f232dff43e1d2e0e04385c06aa730a205671df098d4dcfccef493c9f80053070eb6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5Pbcq92zEeBW:knw9oUUEEDl37jcq4g

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d5067923f16d8ed7437cbb7ed1057407_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections