General

  • Target

    0787b1838bcbb515e8de8cbdf775d13e_JaffaCakes118

  • Size

    27.9MB

  • MD5

    0787b1838bcbb515e8de8cbdf775d13e

  • SHA1

    6f32fbd777cff70bdd48d3c539cd2ded49f1c74e

  • SHA256

    9eaee8033ddefd07c2403358362cd2c1ef3e48de2d288135844ffa59275cb707

  • SHA512

    61a6362ce3ae8fa30b6e3e77176dd043cc8bdbffeae41376576bf851d1694462c78cf84f3c86c08dc4761123f43ed5c3a520be78347d1de6c09b3a9df0e1e713

  • SSDEEP

    393216:TFgR2KoMWyWkhFhXFgR2KoMWyWkhFh21euUufj:dKoGhFhpKoGhFhoVfj

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0787b1838bcbb515e8de8cbdf775d13e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections