General

  • Target

    b768b6966037c4ea4ccb1593452a5b79_JaffaCakes118

  • Size

    159KB

  • MD5

    b768b6966037c4ea4ccb1593452a5b79

  • SHA1

    83b820a2616023a017bbede4f561cb770aabae44

  • SHA256

    e18837899c563c502639699a3657e2cd7e62e1f2a7bdef2ecb8b9cc21093059d

  • SHA512

    ee44e4ca61439a2357b399cf387b564eeacf1bf3b7c08752bce5c9ec1d80975195d161fcd66ddbd4aeabbddd2e0b95da1b81a34ffebe6862c9987a97cf9c1cdb

  • SSDEEP

    3072:9xA6jL/1br3eTISBYnffVsw2VWsRPMs22B8ICLuQowg2TC:9WWL/1KenewGfHNOhowJ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b768b6966037c4ea4ccb1593452a5b79_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections