General

  • Target

    4b0f95733efa9edd5082a6b5cb991000_JaffaCakes118.exe

  • Size

    210KB

  • MD5

    4b0f95733efa9edd5082a6b5cb991000

  • SHA1

    0930a894e481181c03caf93ee0d3e489e852a53d

  • SHA256

    b0b4933d4faa5097b0d17dcbeca2b1d59b726caefceec8749d1ff48b0d95925c

  • SHA512

    b6227b45035dc8f113cf59edd14e9b60d3c76ab40e9b89f301935d561596d66115c89f48e7f95d2bd0f527ebbc4dc661d1c12ee8c24d549eb84d1bf44ef9c4b9

  • SSDEEP

    6144:Hcm4FmowdHoSrXZf8l/ubPzYNLPf4t+lg:V4wFHoSBK/ubLcfy

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b0f95733efa9edd5082a6b5cb991000_JaffaCakes118.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections