General

  • Target

    b32796354861bcfe4045ce0d52eef4b1_JaffaCakes118

  • Size

    4.2MB

  • MD5

    b32796354861bcfe4045ce0d52eef4b1

  • SHA1

    fe622f3cc6f46429dae410a9ac2e69812bb04cd9

  • SHA256

    4c8ab65ed99bfbe4d5514ba9014c860c81b63e8e0f526022024279ae91b62cea

  • SHA512

    f90cf58f0bc05558527da1316a684313f81247964ed85e0479b16ab32e4b24ff2e3ecdaa1a88caf0e640753f1b1f37a62e42a23b2f4df872ac6cb6da41f9ee00

  • SSDEEP

    98304:B9MDcTErl2HPvhLj/insbgKsOSFLDeFkfxvCL/qdWMMET0:HMD6Ml2HnVzbgjOSFOFUxv45GT0

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 3 IoCs
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • b32796354861bcfe4045ce0d52eef4b1_JaffaCakes118
    .7z
  • Mydm20180715/Dbgview.exe
    .exe windows:5 windows x86 arch:x86

    6c426e7c6e3e940e5e5b74af51c68765


    Headers

    Imports

    Sections

  • Mydm20180715/GDaily.org.url
    .url
  • Mydm20180715/Mydm.exe
    .exe windows:5 windows x86 arch:x86

    a3170e9f1f3b73e76de73ac307919a50


    Headers

    Imports

    Sections

  • Mydm20180715/plugin/Baidu_PlugIn.dll
    .dll windows:4 windows x86 arch:x86

    a658f99429a270eb96f8bf69a7efe7cd


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/MSDN_PlugIn.dll
    .dll windows:4 windows x86 arch:x86

    c96454130bec50acfe489e81b2b016ce


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/YYeTs_PlugIn.dll
    .dll windows:4 windows x86 arch:x86

    2048652a5b6d4070e8acca18134d8fb8


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/MydmThunderPlatforml.exe
    .exe windows:4 windows x86 arch:x86

    39c9c7cd2ff99952b66b87f21b223970


    Code Sign

    Headers

    Imports

    Sections

  • Mydm20180715/plugin/xunlei/XLBugHandler.dll
    .dll windows:5 windows x86 arch:x86

    d8f1ac12b30b6798fb91fc48ccde98e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/XLBugReport.exe
    .exe windows:5 windows x86 arch:x86

    0a7856a88222a9dd7dee41475281937c


    Code Sign

    Headers

    Imports

    Sections

  • Mydm20180715/plugin/xunlei/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/dl_peer_id.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2827932cca8caf8a10f65e148687b7a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/download_engine.dll
    .dll windows:4 windows x86 arch:x86

    d604bec9f17838dae5cca81eba57697a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/id.dat
  • Mydm20180715/plugin/xunlei/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Mydm20180715/plugin/xunlei/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    d00508bfde28cfe9a438e31820271a30


    Headers

    Imports

    Exports

    Sections