General

  • Target

    0117eef7205bfc6da83eaf40b6fa3650_JaffaCakes118

  • Size

    20.0MB

  • MD5

    0117eef7205bfc6da83eaf40b6fa3650

  • SHA1

    81f3ebc3bfa982070bb1e85e670968c8f2d0d301

  • SHA256

    65db4158f8eae62046655741411988e98319f26fd5f86f0a041362ef44308298

  • SHA512

    2424fb0c7a6470a6e10dd0cd34201d467e59c4b80d9c39e6a40236e3d74beb5ee54d930c002f829dfe3aa16a44861421fc30f9ae808871fd07f05eb418b57e68

  • SSDEEP

    393216:TFgRYBzyzPpe1vDllaFgRYBzyzPpe1vDllKhT:dzyT6vDllwzyT6vDllKhT

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0117eef7205bfc6da83eaf40b6fa3650_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections