General

  • Target

    0ce1b53b080ffd1cff0dc6e8db14a9c0_JaffaCakes118

  • Size

    205KB

  • MD5

    0ce1b53b080ffd1cff0dc6e8db14a9c0

  • SHA1

    c90a8c046dee9d01389d89a2f6339ec2bfb317d8

  • SHA256

    97d1f96fc0b6f143e003389c52edb73442169f7b98cf4eed16a97bc8cb196124

  • SHA512

    3db1e551a1b9566d3f4f71b8a1f23e95fc00d838750d0e7273f44831f5d0f2ae710e46645efbb58a6b9c8d356d9c8e481f547c962e7b6f6faac60fb8b2b8099c

  • SSDEEP

    6144:pqBn/sWbOEoYsgGng4AGOtD8tAx7raWtkkI:g5/5/On4GOuOraWhI

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ce1b53b080ffd1cff0dc6e8db14a9c0_JaffaCakes118
    .zip
  • 造梦西游5辅助/东坡下载说明.txt
  • 造梦西游5辅助/更多软件下载.url
  • 造梦西游5辅助/造梦西游5魂殇修改器.zip
    .zip
  • 造梦西游5魂殇修改器.exe
    .exe windows:4 windows x86 arch:x86

    767193942186686827a345f28d211831


    Headers

    Imports

    Sections