General

  • Target

    0693d9e9ef0b892d121ed23c06536b52_JaffaCakes118

  • Size

    7.2MB

  • MD5

    0693d9e9ef0b892d121ed23c06536b52

  • SHA1

    74221ffb6eeab32fb577eee9576857407dce0241

  • SHA256

    af1af09ec9e5601134f9caf8ef979435ac6a9a9cca6f2014647a8aaf1434e363

  • SHA512

    aa2eb1c715394c520438a4d99bc92eb1e08d174450d18177079544da6a87bcd8fcd80c190d43d71fffa36516bd2e88f74a30a57f998647ef7812934c2d4e0400

  • SSDEEP

    196608:Ta9+6Y7SOEibgRYBTYSOyCqyzPpCL1vDllu1qf:TFgRYBzyzPpe1vDlluQf

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0693d9e9ef0b892d121ed23c06536b52_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections