General

  • Target

    c8a88f72c9e26331f75529a15c0c070e_JaffaCakes118

  • Size

    14.7MB

  • MD5

    c8a88f72c9e26331f75529a15c0c070e

  • SHA1

    57128569877c5dffd023f77336053bf4c77b923e

  • SHA256

    87b7cbaf670690e549bfd1ef54c051e0f3d0d28912c86b468c00de522466e9a4

  • SHA512

    9b03b40e63578982ad045008472841037d6ac5e7227def274c674175347502c2309c79e4fb4af9b384ebb9ed12c9b046e9f0ca6bdfe412a9ee5f2aebf4404b66

  • SSDEEP

    196608:Ta9+6Y7SOEibgRAGBfWzmKEO+WkGBfWma9+6Y7SOEibgRAGBfWzmKEO+WkGBfW/:TFgR5WiKcWlWmFgR5WiKcWlW/

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8a88f72c9e26331f75529a15c0c070e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections