General

  • Target

    03462aa8cacbab7a0c342e7d2fc64b01_JaffaCakes118

  • Size

    12.3MB

  • MD5

    03462aa8cacbab7a0c342e7d2fc64b01

  • SHA1

    0b1a2f708fd22ecc21768d92d6ca2c30e9074d36

  • SHA256

    0ba02f2d1a72eb0a85e55f3e40294fe888d31293d32aab9f48f234936f469af1

  • SHA512

    656bf09d92fb0e14ff9c646f80464a4f02248a962c63ed9c199fa130ab3c00b696b487106fcf7d82255e8446e52a0b4b635c1bcd90b2e2b3c4503f3d2b72f53f

  • SSDEEP

    196608:Ta9+6Y7SOEibgRX+xZPzmGP8nGBfW+yzPpCLfZPzmGP8Ur23:TFgRX+uG1W+yzPpe4G

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03462aa8cacbab7a0c342e7d2fc64b01_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections