General

  • Target

    043c4cc3ebcad38f434c30767a712308_JaffaCakes118

  • Size

    10.2MB

  • MD5

    043c4cc3ebcad38f434c30767a712308

  • SHA1

    67064be082e8d10cb7076b67034445ca3a5a54e7

  • SHA256

    1df47d538393ff56f502c5a252979187a19ecd39c0199324c345ca73b51aea52

  • SHA512

    a932cc7ac55a9b11af52c3afc3ef08714ce5db2f6d3754f57b85cdf8f338896f4165f5e8514cca48053e496700df9a239226271982153f5286cee0219af9e494

  • SSDEEP

    196608:Ta9+6Y7SOEibgRyGBfWXa9+6Y7SOEibgRyGBfWgJZPzmGP8d:TFgRTWXFgRTWgWGS

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 043c4cc3ebcad38f434c30767a712308_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections