General

  • Target

    0ce09e5d95ef4ac4a1f69a891c4e07de_JaffaCakes118

  • Size

    24.6MB

  • MD5

    0ce09e5d95ef4ac4a1f69a891c4e07de

  • SHA1

    3bd4e4e3111a513006e22145fa53ea53677ae1a2

  • SHA256

    c41cdfaf62e00e69aafaef4bc16a75226e41f783878d03bf2b78658178c5fc12

  • SHA512

    cfd111a80ae7072cbdf6f2a6cfeeeb833d844c9c6fd579f7296d8a95727e8cf0937c5c412a6c89217a939fe91a7dcf553be3969b37d161fb7adf1a218a7a50e3

  • SSDEEP

    393216:TFgRtWZGwyzPpebG5FgRtWZGwyzPpebG:1yTRyT

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ce09e5d95ef4ac4a1f69a891c4e07de_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections