General

  • Target

    05760fef1fd627d46931611dc620baa3_JaffaCakes118

  • Size

    8.4MB

  • MD5

    05760fef1fd627d46931611dc620baa3

  • SHA1

    44273abea6bc3e1a4c87baca2a46b8ee64186286

  • SHA256

    14486854fd515f665f197df5240aea98b2fdce9a3240c4b81c464d69c6b511fb

  • SHA512

    dfd641553d405e69a337ccdf2ca55f97ea2a470e4d715657eacf158ed44b7110899962ad90068d01461bd6e047451d9a3cd9ec9a1aace6561084ce98d9e9c27a

  • SSDEEP

    196608:Ta9+6Y7SOEibgRVghMa9+6Y7SOEibgRVgh:TFgREMFgRE

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05760fef1fd627d46931611dc620baa3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections