General

  • Target

    b0ae211d2ac1a4dfa8dbb7a55151be7a_JaffaCakes118.exe

  • Size

    225KB

  • MD5

    b0ae211d2ac1a4dfa8dbb7a55151be7a

  • SHA1

    7c6750728c7208fa89d8b4a3d302d26728b17e95

  • SHA256

    3cd3fa34d2a8614ba8bba7bad83884b5bc95e7a5d0994e0be5ff1a176ce0050a

  • SHA512

    2fd238e9fe3ed473a6a9da273df508267753ac93363b1562fb60f9305f5a015d1caa5bd75ecee5d55cc52a2fa2cd3b84df654a6947f4c8397c0bd97f0dfb6d3b

  • SSDEEP

    6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwb:KUvRK4ZusQHNd1KidKjttRYLwb

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0ae211d2ac1a4dfa8dbb7a55151be7a_JaffaCakes118.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections