General

  • Target

    f9cfcb2c3858186646300505e833296f_JaffaCakes118

  • Size

    87KB

  • MD5

    f9cfcb2c3858186646300505e833296f

  • SHA1

    27854594db454bc0107ff2d16a6cde5181a3d24b

  • SHA256

    2c5d321313c437c493cb81956dc769a361815cdbf1db895c98470d54be9b1c61

  • SHA512

    01394ea0d04cdc803f0ac296a43a8599568fac6b0db2d08a0501e777aee73b1c4a5c59a2dc44f84bf89521cba71232c7ab4d89cde45292fd97a33a3feefbae52

  • SSDEEP

    1536:GtyyRF/OxmfzDcazhe2hb5nnW+ME9Sf2+pg9R8LxM8WkNK+tEf6uacr:7yTtfbo2nWW982+paS9pWkNxXun

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f9cfcb2c3858186646300505e833296f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections