General

  • Target

    164a96b7cad6aa173ea63f8ac0109573_JaffaCakes118

  • Size

    4.8MB

  • MD5

    164a96b7cad6aa173ea63f8ac0109573

  • SHA1

    0423a27a822ff2310954e42f0dc314a3eba3cfc4

  • SHA256

    918e74401dc94699f9909bda09fe4469338fd86cc9fba2a2f23c8c79da899814

  • SHA512

    16201988643198d0090dbff9cf635ceeb0eb426c4c7634675adb585be38e4eacfad92df2a985aba83a5969ecab8ee0341b09d3d5924efa09e74d6de877312632

  • SSDEEP

    98304:zv3apmo1Y4+6Y7SOEfX/SbgRXl+77GBfWyD77GBfWzHgOt77GBfW:Ta9+6Y7SOEibgRSGBfWWGBfWzbRGBfW

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 164a96b7cad6aa173ea63f8ac0109573_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections