General

  • Target

    0ca970389480541bddf097db1dfd26e4_JaffaCakes118

  • Size

    13.2MB

  • MD5

    0ca970389480541bddf097db1dfd26e4

  • SHA1

    9f5c18091232b72290588a64e8daa23d03aa5f2e

  • SHA256

    bb39c3a6a3e595f034f49005d86e98b42b797cac35f45bdfa1cd921ecc04d7ac

  • SHA512

    35e11b9ea7e7d6cab501a4bac54046839a6c007a66420e7122828fb2fbcb74e5270ca146e9ff92cf442710505ed23c71ca179119801dbdb30b67e2a6f6b31a1e

  • SSDEEP

    196608:da9+6Y7SOEibgR/8VGBfW9bbbRGBfWJGBfWoa9+6Y7SOEibgR/8VGBfW9bbbRGBm:dFgR/8iWMWeWoFgR/8iWMWeW

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ca970389480541bddf097db1dfd26e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections