General

  • Target

    01cdbe905be3b19705bcf71bc87dd53a_JaffaCakes118

  • Size

    13.3MB

  • MD5

    01cdbe905be3b19705bcf71bc87dd53a

  • SHA1

    e3bf344addd35cb7df129fc8333480e618b3693a

  • SHA256

    fcf57e676b0b40f75f98079bee0d4525fd2bba99a75e773355c25c8496b0c6f2

  • SHA512

    da281502877200907b325843a11bb9c88aab27eb7ac944248a645ddca8567c8155f05d4ddc4e86f68e836273e58ec2b27dc84572ea40b165e8d12ef726cc44e8

  • SSDEEP

    196608:Ta9+6Y7SOEibgRPghC+hGBfWva9+6Y7SOEibgRPghC+hGBfWC3:TFgRaC+mWvFgRaC+mWC3

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01cdbe905be3b19705bcf71bc87dd53a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections