General

  • Target

    02b7ff64c6ab85ea4fd39a8e082c282a_JaffaCakes118

  • Size

    14.2MB

  • MD5

    02b7ff64c6ab85ea4fd39a8e082c282a

  • SHA1

    d6a1a0e0cd651de2ec4b0ad0753513a30c37e358

  • SHA256

    ece34d78b747a27cefa8fb81b4a68b29f341096e65c065d7af29d14f671f281c

  • SHA512

    7ba0878687286ad67cd6ffbc1bac77b7da16e1d804817429f6685d979a0d14dcffd21675134b99771bc7613b585db0ca1033c96faa26aafd3a4f062a16ea453c

  • SSDEEP

    196608:Ta9+6Y7SOEibgRNKube8Kvla9+6Y7SOEibgRNKube8Kv8:TFgRMFgRJ

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02b7ff64c6ab85ea4fd39a8e082c282a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections