General

  • Target

    d270ae8adfea4a82cfe6ce29df116674_JaffaCakes118

  • Size

    14.8MB

  • MD5

    d270ae8adfea4a82cfe6ce29df116674

  • SHA1

    ef2f12bf54ea4152b93edff51a2bcd30ce28ba11

  • SHA256

    92205af13ac0dcddd5ef13ed4807730eb7705a4ce7c8e74d3ba29de9ba354ea3

  • SHA512

    622c3ed446a29b894ac06bafebf2337936166b2143f74adbd7bee0b380f9a55f4c1c54586041fb5e8f5b76a3a7fda46a68ae034aae15d64ce549b99223f97caf

  • SSDEEP

    49152:CELbELbELbELbELbELbELbELbELbELbELbELbELbELbELbELbELbELbELbELbELE:

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d270ae8adfea4a82cfe6ce29df116674_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections