General

  • Target

    0e20bb0775d7260cad3a624a839dd7a2_JaffaCakes118

  • Size

    99KB

  • MD5

    0e20bb0775d7260cad3a624a839dd7a2

  • SHA1

    f7e2903c54718be210f99fd88ff225502bdba065

  • SHA256

    2ad42a569aec316449860c829e35ca4e087ab0eade1699cd486dab8d0e627232

  • SHA512

    52c6612d36808c5f9d71f34d23244924fd0307d57430174bee57351c6a3ecb1cfc3c2d357f817e0bd0d9057a181eb1da7e3fe59dfdc67d19ea0d408ba5500687

  • SSDEEP

    3072:f97eZ37HZWKmYQRJD61GEHxyQBm4B1HrCKPDwH:xeZ3zZWKmYSwPYGIKUH

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e20bb0775d7260cad3a624a839dd7a2_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections