General

  • Target

    13a8de388523cc5687eef85317314b9c_JaffaCakes118

  • Size

    23.1MB

  • MD5

    13a8de388523cc5687eef85317314b9c

  • SHA1

    9fa0518adec558c89aabad85dd1cd328b563c63d

  • SHA256

    e614341cc4d35f8471c1f0bf40317083403314c27d05eb45d3519396008db302

  • SHA512

    2c7a82cc8f5b0b7095017966fd32441f368eb21fde7c10e38d0d750c69abf9a44872f0358276108dda4b26cda59d80a10df020d0284bfe68efb4780fc033e86f

  • SSDEEP

    196608:Ta9+6Y7SOEibgRyGBfWXa9+6Y7SOEibgRyGBfWgada9+6Y7SOEibgRyGBfWXa9+N:TFgRTWXFgRTWgkFgRTWXFgRTWgh

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13a8de388523cc5687eef85317314b9c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections