General

  • Target

    bfe42a7b829f447ebedb14221fbe4bd6_JaffaCakes118

  • Size

    25.5MB

  • MD5

    bfe42a7b829f447ebedb14221fbe4bd6

  • SHA1

    cbf2b5662b5f980827bebb4dbb3d897ed8254493

  • SHA256

    7d9305ee93a294b0f56934a5bb44441c2ba2afa840bd90b79b0ccff9ae90d37c

  • SHA512

    f351685d59d581b2f23480d0c9b455ea85abeb2595b820c29f1ce5f1316fe96986eaf381c02ca4e05b0411bf3c79f393145151e922278abd4ade38c0f6d57df0

  • SSDEEP

    393216:swqywSwqFjUtYj6gYPYKwqywSwqywqywSwqFjUtYj6gYPYp:Pj61uj61A

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfe42a7b829f447ebedb14221fbe4bd6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections