Overview

overview

10

Static

static

10

fa0321ef3e...18.exe

windows7-x64

10

fa0321ef3e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa0321ef3ec29d1f82e18cc3aa32e41c_JaffaCakes118

  • Size

    87KB

  • MD5

    fa0321ef3ec29d1f82e18cc3aa32e41c

  • SHA1

    a2f79dc3176122a3bc1858ea0dc3ed1159befa5c

  • SHA256

    ac17d2279aa8c118e1f8d1a26dd49122aac007676e81368cb687188329d8cf93

  • SHA512

    b828afb5bbe9d926d14d1bca092218d0ce49acbbf902d62f5cc1f1130c4eaab2ea287fd4837c3d23b7b9d57a707fc44f016288e3216345248d45526993fbb8ae

  • SSDEEP

    1536:GtyyRF/OxmfzDcazhe2hb5nnW+ME9Sf2+pg9R8LxM8WkNK+tEf6uacG:7yTtfbo2nWW982+paS9pWkNxXua

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fa0321ef3ec29d1f82e18cc3aa32e41c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections