General

  • Target

    2105b4398f1fe1179f56f8a479fcd915_JaffaCakes118

  • Size

    6.2MB

  • MD5

    2105b4398f1fe1179f56f8a479fcd915

  • SHA1

    41563f9320a8fb6f4c3f00646b75ac5300d62859

  • SHA256

    1c726d6413c00ec9936aa326c4fc0c5d35ead976ea483bfd900c3197ee96ccfa

  • SHA512

    3b1abe52c8cb3fd93ce9cf49c8b5a5814b67302d2327d4c1c5f8cafe34b9a7f516f079402767c344cb9f9e3e6a0b16c4a1b1f5384c8602736228abbe34752e91

  • SSDEEP

    98304:zv3apmo1Y4+6Y7SOEfX/SbgRsZLt77GBfWtP2BSUXfcrRk0kq4Dfa77GBfW:Ta9+6Y7SOEibgRyGBfW5r23QGBfW

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2105b4398f1fe1179f56f8a479fcd915_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections