General

  • Target

    02b2e41141750599e791c4a780d0f5ab_JaffaCakes118

  • Size

    20.4MB

  • MD5

    02b2e41141750599e791c4a780d0f5ab

  • SHA1

    1ac246f8e0c4372df295b3990100b190d713f000

  • SHA256

    a127c3ece71022b00582172d3c457fa9752d00b8b46c385e984f52c9e8ab2745

  • SHA512

    08f212144684d7e1087fb984dec4335b75670510a6916dedf10f4cc5b87853cb1efa4ad1524789a2ed6b80540fab222d58ebae8b95a2fc9b32636a1fae8e7ef6

  • SSDEEP

    393216:TFgRYBzyzPpe1vDlllWJ+IQfPKeKBIeh:dzyT6vDllRnKe8nh

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02b2e41141750599e791c4a780d0f5ab_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections