General

  • Target

    87911e8c04bc8c6a229f3a16c1ea074b_JaffaCakes118

  • Size

    18.0MB

  • MD5

    87911e8c04bc8c6a229f3a16c1ea074b

  • SHA1

    1a1213eb425568a4b357eb930d7776fa46cfde00

  • SHA256

    0526aa1b0c8cf86b9cac011c0436dd2e0f887a8f032073cb6cf10cb25cc6923e

  • SHA512

    eae7c9b6d681669b800e7b47a2fc37b6f5263b60f9490bcd00d1261d55351d1727984b80807edf4b028fde76a35be2953836f71b8a175bc5a936d27e50bb55f3

  • SSDEEP

    196608:Ta9+6Y7SOEibgRTO+Xv2GIr23QGBfWPa9+6Y7SOEibgRTO+Xv2GIr23QGBfWF81:TFgRz/DWPFgRz/DW+1

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87911e8c04bc8c6a229f3a16c1ea074b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections