General

  • Target

    14983f31618073d5cc0aa462a006d836_JaffaCakes118

  • Size

    18.7MB

  • MD5

    14983f31618073d5cc0aa462a006d836

  • SHA1

    6b5e7f59ce78b1626ce9d0cf0a5a3101f11f5ac1

  • SHA256

    e60978fe92d8071a6735921c627e9f19467b08e1c4026d81b906c650e9f50756

  • SHA512

    76f17cc6d95f251a5c53e581aafa89b5270ff3b286129628cb1bfa1fa5600e9d994ddf89e864efd25dcc67fa78bc49d333a8667d8a7d0f408f0eff1bfdcb541f

  • SSDEEP

    196608:Ta9+6Y7SOEibgRkGBfWAzRUGBfWyr23mr23QIya9+6Y7SOEibgRkGBfWAzRUGBfo:TFgRlWAz/W8IyFgRlWAz/W8I

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 14983f31618073d5cc0aa462a006d836_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections