General

  • Target

    03fc3ea2053c9e9b0505fb71fa23c9eb_JaffaCakes118

  • Size

    20.4MB

  • MD5

    03fc3ea2053c9e9b0505fb71fa23c9eb

  • SHA1

    f64c8a4d889fb0a6b8f241f2e2a999248ad4d46b

  • SHA256

    8bad2fcf79c827e6c19f78bf8d5dd77100321be70345dda93ef0eb9dfcc28d8a

  • SHA512

    1544cc0aacf231933941cfc33939f1ec89444ce347e9c108d3bda05196f9cb70156ad53c2674c6dbfb2182e11f7bfc04db92344c6d3eda80457fe5deb8c844a6

  • SSDEEP

    196608:Ta9+6Y7SOEibgR9bWyzPpCL/D53Qvkr23ya9+6Y7SOEibgR9bWyzPpCL/D53Qvko:TFgR4yzPpe/D53oIFgR4yzPpe/D53o

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03fc3ea2053c9e9b0505fb71fa23c9eb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections