Overview

overview

10

Static

static

10

04a1c49937...18.exe

windows7-x64

10

04a1c49937...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04a1c49937eb89a6a5320942c1f89bad_JaffaCakes118

  • Size

    1.9MB

  • MD5

    04a1c49937eb89a6a5320942c1f89bad

  • SHA1

    9f9a2584e5b20192ac6251d224a721fef327bff9

  • SHA256

    63e9b730aafc5d5b21daa24170ec3a715890915e616b6cce8a043b9b2056575c

  • SHA512

    2936a00bd554303b499d6eb4e3c133f6a57f3436b66e0a1707e4238b7fcd8cd34d1e8cc83d24c629f7093fcb6ce1073b929c703e4234bf24f2a690394832b658

  • SSDEEP

    49152:knw9oUUEEDlM2/ngDY7T9VzsX1lKbYILkfHk:kQUEEL

Score
10/10
upxminerxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04a1c49937eb89a6a5320942c1f89bad_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections