Overview

overview

10

Static

static

10

96298998f8...18.exe

windows7-x64

10

96298998f8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    96298998f84940d29e4e8718a2bc7383_JaffaCakes118

  • Size

    191KB

  • MD5

    96298998f84940d29e4e8718a2bc7383

  • SHA1

    ff4ce8324a0f20eec5fcdbcfb87118fc55d8bdf2

  • SHA256

    b77c0abbbc11c2eb8de4d2b4a045118f3cc08661f263a53feba8e07ce3f76092

  • SHA512

    0a2eb62b92c5c52a0d274cbb79fbde806fa60012ebef3d6f40c09e353a64992cb010f9e7aea8d64c2eab0feca53a59778c9007238322a3ea238d5c74f8ec9701

  • SSDEEP

    3072:YxfVKN4bWuqwmCu8k081alYBd+BcEKLNZpgVRJ6jDo0PejViWiW5vs6kPDEkeYER:Y7qFCup081alYz+YZpgZ6jDXqVV5vSEx

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 96298998f84940d29e4e8718a2bc7383_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections