General

  • Target

    0c1cf1c5db95125ee820963f4bcff4e0_JaffaCakes118

  • Size

    24.0MB

  • MD5

    0c1cf1c5db95125ee820963f4bcff4e0

  • SHA1

    fd1379f35f9c349164351db255e80d1745d7f917

  • SHA256

    bbd29c8a1a07b42bce11fd3e8f31e829bb65030265f0cde89a230f1225df10a3

  • SHA512

    45a585c07e4bb86fb04be7d15aa00a02914731da61cde97d4380a07c1dfb4cf0f34bb3c5fdc6582f5eaa2a6e3084b42b7c58cae6b5d0cf7160d5c2531ae50033

  • SSDEEP

    393216:TFgRYBzyzPpe1vDllv+/uFgRYBzyzPpe1vDllv+//w16:dzyT6vDllNzyT6vDllOn

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c1cf1c5db95125ee820963f4bcff4e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections