Overview

overview

10

Static

static

10

fa4908cbc2...18.exe

windows7-x64

10

fa4908cbc2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa4908cbc210cb98414a53afc3a8e4f8_JaffaCakes118

  • Size

    1.8MB

  • MD5

    fa4908cbc210cb98414a53afc3a8e4f8

  • SHA1

    bdba7d967fae4da84049e018d2a9b2cd55d1cf28

  • SHA256

    4ea943862ee913639b137903f8ab456ea885a456ab4c74a02d64732c2fe08388

  • SHA512

    49d55090e7114e423f25fbd02a2d96eeb654aa029c9b65efa1a3e1d8e04569962fa0435e6e3adf317b7c0bf6c2c05741310ffaf92e644f77ffb47c2f5ee9a9dc

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82Sz66JBjY:NAB3

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa4908cbc210cb98414a53afc3a8e4f8_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections