General

  • Target

    f7b7181970e2a03550fd82f5e224c8e1_JaffaCakes118

  • Size

    87KB

  • MD5

    f7b7181970e2a03550fd82f5e224c8e1

  • SHA1

    490d2f83e1fb61923fd7b71c6586df542abcfaf0

  • SHA256

    562ebe12fc7286724b4c5a9eda7972dc03fbf9f0d827d348c291d529f31fc5b8

  • SHA512

    99adab3ccd121d20b245f929ee9ff39fb8d20d40bf1c8ba74fe3cb5d91701d10b312406b61dfcc12dc17e6dfbcd662d216c106afb6cf2b66b52ed5d338008f49

  • SSDEEP

    1536:GtyyRF/OxmfzDcazhe2hb5nnW+ME9Sf2+pg9R8LxM8WkNK+tEf6uacU:7yTtfbo2nWW982+paS9pWkNxXu4

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f7b7181970e2a03550fd82f5e224c8e1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections