General

  • Target

    24872be3196481673bed01b7191a8ce6_JaffaCakes118

  • Size

    14.8MB

  • MD5

    24872be3196481673bed01b7191a8ce6

  • SHA1

    ce1217f094c70f048c7dc8d517f719b6d80e95b4

  • SHA256

    72aa7ab889fbaee202b3b22566f2769d5d0dcec1a1d8f29968140d6e132002db

  • SHA512

    0532fc69725831dc27001274890a7e619b1c9b82ba4b7d719b10be55797ce0b2cd2bef20d33ecab9cc37d466e71e4b4d1a19898511a3de30c2817ad6463feede

  • SSDEEP

    196608:da9+6Y7SOEibgRWGBfW+8GBfWIuhea9+6Y7SOEibgRWGBfW+8GBfWIuhF:dFgRfW+NWIuheFgRfW+NWIuhF

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24872be3196481673bed01b7191a8ce6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections