Overview

overview

10

Static

static

10

db628145a0...18.exe

windows7-x64

10

db628145a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db628145a0431e83a83a8c86c22b8bce_JaffaCakes118

  • Size

    804KB

  • MD5

    db628145a0431e83a83a8c86c22b8bce

  • SHA1

    d485d15f7014b3d36088eb7adad280b4510d5aad

  • SHA256

    bcc7f4ea926b5a408f4c06dbfc4ecf871b01fcb609cbd23373fdcb8750e91a9d

  • SHA512

    0089260a4eb72fa56f204cb8f558972180f9ef5cc18b911f5a96d0b05fb732287e7af5259a95128b1d98ef1ef7d106582bf7b2c03800db7b609046b5ec50b676

  • SSDEEP

    24576:c368PxE1QmQ+gwDfEuD4tsymB8w87umtM2nxZy:cpTmX7DfEuD4tsyPw8O2nxZy

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • db628145a0431e83a83a8c86c22b8bce_JaffaCakes118
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections