xmrig | dfba551371f0a05ddccb8bf14084ad32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dfba551371f0a05ddccb8bf14084ad32_JaffaCakes118
Size

2.7MB
MD5

dfba551371f0a05ddccb8bf14084ad32
SHA1

364cdcb526c488336ada6b38b7cb19f3799dff27
SHA256

8397bfa5d050466184d46803220c50c4cccf3e06dea15fe0cfc9c90f20deeaad
SHA512

618848547ba12665aa2e8af9d1b2560d65f075660e864244c22360c69e59adba413f3c1aee94dd5a9da1e8dee8459a0ce9a24d2b8548ca6f767e691ea279e841
SSDEEP

49152:SxK+yWZD1NgIfkRR3J9lS58zfdpImTBdjFnT9OneqWeje:DUNgIfvAfdpLnTAe2e

Score

10^/10

miner xmrig

Malware Config

Signatures

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

Xmrig family
xmrig

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfba551371f0a05ddccb8bf14084ad32_JaffaCakes118

Files

dfba551371f0a05ddccb8bf14084ad32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

MHD_add_connection
MHD_add_response_footer
MHD_add_response_header
MHD_create_response_for_upgrade
MHD_create_response_from_buffer
MHD_create_response_from_callback
MHD_create_response_from_data
MHD_create_response_from_fd
MHD_create_response_from_fd64
MHD_create_response_from_fd_at_offset
MHD_create_response_from_fd_at_offset64
MHD_del_response_header
MHD_destroy_response
MHD_free
MHD_get_connection_info
MHD_get_connection_values
MHD_get_daemon_info
MHD_get_fdset
MHD_get_fdset2
MHD_get_reason_phrase_for
MHD_get_response_header
MHD_get_response_headers
MHD_get_timeout
MHD_get_version
MHD_http_unescape
MHD_is_feature_supported
MHD_lookup_connection_value
MHD_queue_response
MHD_quiesce_daemon
MHD_resume_connection
MHD_run
MHD_run_from_select
MHD_set_connection_option
MHD_set_connection_value
MHD_set_panic_func
MHD_set_response_options
MHD_start_daemon
MHD_start_daemon_va
MHD_stop_daemon
MHD_suspend_connection
MHD_upgrade_action

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.data Size: 6KB - Virtual size: 5KB

.rdata Size: 116KB - Virtual size: 115KB

.eh_fram Size: 324KB - Virtual size: 324KB

.bss Size: - Virtual size: 6KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 9KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 56B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 21KB - Virtual size: 24KB

.reloc Size: 54KB - Virtual size: 53KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.data
Size: 6KB - Virtual size: 5KB

.rdata
Size: 116KB - Virtual size: 115KB

.eh_fram
Size: 324KB - Virtual size: 324KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 9KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 56B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 21KB - Virtual size: 24KB

.reloc
Size: 54KB - Virtual size: 53KB