General

  • Target

    b857af1ed73b114169a56c8130743061_JaffaCakes118

  • Size

    5.7MB

  • MD5

    b857af1ed73b114169a56c8130743061

  • SHA1

    95a67a8c62f9e61a59fb75eeb00cd42083dc48f4

  • SHA256

    1a89b22e2e7850c4209c5dac6ab2e61388d9c5b6ffcd91fac2a96d3e36604b61

  • SHA512

    2f61a51817e2b9ad8011bf6dc3ba20a5dc5fe145239b2317c65639a59b8138909b0c4a4049dc047edd785152c7016ecef91dfd723c9839dc95c941acc641175e

  • SSDEEP

    98304:zv3apmo1Y4+6Y7SOEfX/SbgRPgh0Jg1QOeU8E1qfGq4IDQ177GBfWKMu6/:Ta9+6Y7SOEibgRPghN1qfkuQZGBfW

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b857af1ed73b114169a56c8130743061_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections