General

  • Target

    2d2eb765f70fc43114ff806d375f752b_JaffaCakes118

  • Size

    24.2MB

  • MD5

    2d2eb765f70fc43114ff806d375f752b

  • SHA1

    4f7eb1502759dc8aeea34370c523331b05ab8e78

  • SHA256

    6a425f1d9b84f52cbb5aded60553aff210a38aef1c30e9bd965522efeb023140

  • SHA512

    85ca8f95998f2d685eaef291a3159db71250553810b5a9ee87f492f104751f5d1ad7aa1916f9f594ae220010a67f585c0538b9cca70b311cb4cc8110904c081d

  • SSDEEP

    393216:TFgR2KnyzPpeEFgR2KnyzPpeyJFgR2KnyzPpeEFgR2KnyzPpey2N:dKnyTnKnyTLjKnyTnKnyTLe

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d2eb765f70fc43114ff806d375f752b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections