2c58854b5c481e61fa75ba8fa40d08b6_JaffaCakes118
- SHA256 807b4992925c7f407f5c3c967e0e5830d0ba519c103b8660f347962451f6d18a
-
Detect Blackmoon payload
-
XMRig Miner payload
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=3, id=12, version=7291,
count=5, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=14, version=7299,
count=137, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=93, version=2179,
count=31, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=511, id=1, productName=Unmarked objects,
count=105, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, productName=Unmarked objects (old),
count=17, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,