General

  • Target

    95c2c2e1ad5a2fe0ba0545301c6633b4_JaffaCakes118.exe

  • Size

    180KB

  • MD5

    95c2c2e1ad5a2fe0ba0545301c6633b4

  • SHA1

    aea606cacaa553945fbca0535c91810e5315a5c6

  • SHA256

    b1b9e6d7746e75bb2afb349944369a98bc5db2985541f0d842cf07779027732f

  • SHA512

    c8121b3f05765cc4b26b81253a0454d40688611951fe9a6d4c002f27e1e5617a96ec52eed759e1909a7cc365cc24e9951b9880a48a1ffcc0d6dbf032f0db0a85

  • SSDEEP

    3072:idEUfKj8BYbDiC1ZTK7sxtLUIGST78jUVTyxhnMGnOkl5j:iUSiZTK40E8UVwpnOSj

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95c2c2e1ad5a2fe0ba0545301c6633b4_JaffaCakes118.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections