General

  • Target

    db4783d98a68a9798aa3c953999e98e4_JaffaCakes118

  • Size

    7.6MB

  • MD5

    db4783d98a68a9798aa3c953999e98e4

  • SHA1

    d8c76af371431c7211aff2758e2a2067168e5027

  • SHA256

    7c5050753cbab1d4f72a0ef6ea8c06a68d6ea831ea84c9a8ff70614d3b656e91

  • SHA512

    68fe18c9bb7b04e3cecb6e17f265c6919b740e935a53f8c10740b71c9b096367a335cbb74f312b8a8088d209fd08c49bfa353b0f7b46f13cff397bcfcfce0986

  • SSDEEP

    196608:Ta9+6Y7SOEibgR7ZOfeWKCBoDmpZPzmGP8cGBfWJGBfWzb:TFgR7ZOfeWKCBoC2GuWeW

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db4783d98a68a9798aa3c953999e98e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections