General

  • Target

    fb1d52a4b62a5b525bf7ca39eb1abd3e_JaffaCakes118

  • Size

    82KB

  • MD5

    fb1d52a4b62a5b525bf7ca39eb1abd3e

  • SHA1

    105f5cab0cdafaa03db44ebb8075d741d2196f49

  • SHA256

    7ff080db2a6fdb6711708dc0dca9d2f041aba68c34c20b445d23e88908247b88

  • SHA512

    1ac70ca784e63a714f47ba5b7c536d6793868cf62020d6a718e23411ade3a5a13eb47fc793c31bcc6f16a3ed7bcfef8c57cbfe9043fe1cb5188511fbf19c959b

  • SSDEEP

    1536:x8/+fJMq7Kg2t7QhUJW72RFU9xTuCY+9BNyfEip2:x8+fJMq2hQSW7+U9xTuU9BofY

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fb1d52a4b62a5b525bf7ca39eb1abd3e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections