Overview

overview

10

Static

static

10

11c3eca561...18.exe

windows7-x64

10

11c3eca561...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11c3eca56158c1cca3cc021cc04a6e74_JaffaCakes118

  • Size

    2.4MB

  • MD5

    11c3eca56158c1cca3cc021cc04a6e74

  • SHA1

    c6b76f791960e8d89da15718255f1149dff1ca0d

  • SHA256

    63ea156c10c02173b397e22e243a873fd18a2735a72e919e2f483365aa40451f

  • SHA512

    937089ea4a8648055a5e952b5b43e76dd7eb5243dd385501a867294a4e9888f8d2494cf8dfdaef522eb27cbfff4e8c299f2f334f80f41db594b1123b9dfddc19

  • SSDEEP

    49152:fE6QJp3WSbvCcE6QJp3WSbvCcE6QJp3WSbvCcE6QJp3WSbvC:86QJ1deR6QJ1deR6QJ1deR6QJ1de

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 11c3eca56158c1cca3cc021cc04a6e74_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections