General

  • Target

    ede0630b470ce4cd84dcad393648bc87_JaffaCakes118

  • Size

    501KB

  • MD5

    ede0630b470ce4cd84dcad393648bc87

  • SHA1

    4a1933c5b613698dc809731f4a826c375fda58ee

  • SHA256

    573ff6fcfb0e63e914e6620cacbfbc8e9d094ae29bec7e02ad0b33c5feb601c6

  • SHA512

    aebeb808fc392942fe8f53e2c0b6a00e6b2a3af62c1c06a872ff7c14458cd27f40e08a648c228000c731acc0cf6397c17e487769bba54d4f2bcf3fe09f822b03

  • SSDEEP

    6144:FelnyUqrd8IudLvfOtd3BAgxatWxphWyrWA:FWyUadkTCd3BAvWDhWyrWA

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ede0630b470ce4cd84dcad393648bc87_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections