General

  • Target

    c26c51b4da5e92d77b4aae3abf19b0a3_JaffaCakes118

  • Size

    59KB

  • MD5

    c26c51b4da5e92d77b4aae3abf19b0a3

  • SHA1

    6a294da6b5a68cfce5acdd4c82531b1c126725a1

  • SHA256

    51627456fbcc1d1d3e46e81de1821f12c10d0ba8cf18ff21a045943d53ebe84a

  • SHA512

    65689839fecbd389946263ceb7d657518ab1c656d438d58fa482e7e3acf1efbb65c1fc2da74d187ab48fd4214c31dcbeea0fe060373c32f3b786300108358453

  • SSDEEP

    768:SXYcS9U/AhNEIapPnx8wzpycBvnvDmNq6rPR1hjWjApPDoX/IW+MtgEZRLY6:F9mgpcrzpyknkZzjY6D02MekLY6

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c26c51b4da5e92d77b4aae3abf19b0a3_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections