General

  • Target

    26481af4005b6c38d3ff83b231c95edf_JaffaCakes118

  • Size

    25.2MB

  • MD5

    26481af4005b6c38d3ff83b231c95edf

  • SHA1

    eb142db2f61605c6d767c943632158dd830a5a15

  • SHA256

    dd58b1e612dae14b5657e9818c95282e7a60bb78e763e083dab8835d4ae931ee

  • SHA512

    18e105829777462fde0043bebb5135f0c8dd3eb052d88390a143c84d1186398cf8237172d199cfad58ed2175964f8cef42bbcef19ca4792105c3fb99de901992

  • SSDEEP

    393216:TFgRKkvDllJWeWeWeW/FgRKkvDllJWeWeWeW0FgRKkvDllJWeWeWeW/FgRKkvDlj:DkvDllwkvDll/kvDllwkvDll

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 26481af4005b6c38d3ff83b231c95edf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections