General

  • Target

    0163c8a75b3df85a24517f510318e98b_JaffaCakes118

  • Size

    17.7MB

  • MD5

    0163c8a75b3df85a24517f510318e98b

  • SHA1

    3c0d88ecfddd1266d2e90ac4a8e22c61bd6bf284

  • SHA256

    d5502fc405ea55845a834acdbd2a31be194203509424f0e6f0908aef0b289478

  • SHA512

    5bffc735177fae231276e3f4ea8e5c1e1b6bd4bd0414f1de7f52b105652a9035c4f90c35b2842f9a3b3a96f24cefe4ccac0361fe07a740c19ea96f2d699937de

  • SSDEEP

    196608:Ta9+6Y7SOEibgRpJhZPzmGP8o0ZPzmGP8Aa9+6Y7SOEibgRpJhZPzmGP8o0ZPzm1:TFgROGRGxFgROGRGy

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0163c8a75b3df85a24517f510318e98b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections