General

  • Target

    a4dbf8783bf2b5e2f1f50039949519f7_JaffaCakes118

  • Size

    766KB

  • MD5

    a4dbf8783bf2b5e2f1f50039949519f7

  • SHA1

    75790dae46c85e80d19af50b8390b1a2485bdf0a

  • SHA256

    5a1935a906958afda7cf4953f4e1a8c625db60a13d3edfb831c6b9fe054ddb01

  • SHA512

    ebd35206267633348c39714df58f2c96b71ec1ce33b48be65720b0558350f461659a00457bb8f8463edbe4d4a48491e6f1f99c0e45dadf389a49d554e162fcc3

  • SSDEEP

    12288:/aG25uuUVnWoxtubr4BSO0qZ+huwAqncCoyUz/l8SFRAA8R6FyAiU/0ZULiRNT2R:CGquLWo7uABgfMwAU7oyUz/lp74YUAiG

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • a4dbf8783bf2b5e2f1f50039949519f7_JaffaCakes118
    .rar
  • 手机证书签名工具3.22/data/20100320.key
  • 手机证书签名工具3.22/data/20101225.key
  • 手机证书签名工具3.22/data/signsis.dll
  • 手机证书签名工具3.22/data/signsis.exe
    .exe windows:4 windows x86 arch:x86

    d658743a5c8b4cccdba9d354aba06179


    Headers

    Imports

    Exports

    Sections

  • 手机证书签名工具3.22/data/signsis.ini
  • 手机证书签名工具3.22/data/说明.txt
  • 手机证书签名工具3.22/data/软件下载.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 手机证书签名工具3.22/使用说明.txt
  • 手机证书签名工具3.22/证书签名工具.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections