General

  • Target

    3b274d9f6b25a72908c67a1beff1a34b_JaffaCakes118.exe

  • Size

    239KB

  • MD5

    3b274d9f6b25a72908c67a1beff1a34b

  • SHA1

    54ded9f7c5ab2bce33042320d8b6cfc6b879b64d

  • SHA256

    291cae56d5ea928f97a428957b02145406abcada610a89b09428a4e5e8a15a5f

  • SHA512

    495bcf20fd3ab929a66c480f20a35bd749d62b5cbef21077d5148350636fc6ced3c46e51e92679f8296dc31a5b4dd508ca1f80dfc7c6cf723b2ca3a534945ca5

  • SSDEEP

    3072:ydEUfKj8BYbDiC1ZTK7sxtLUIGT9kXH0hga4PjBy2XiXV/mwTwyg4K+mpPNHdUpB:yUSiZTK40V2a4PdyoeV/Hwz4zmpPNipB

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b274d9f6b25a72908c67a1beff1a34b_JaffaCakes118.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections