General

  • Target

    3c2b01d34d33a515b817f4286b2bd53e_JaffaCakes118

  • Size

    81KB

  • MD5

    3c2b01d34d33a515b817f4286b2bd53e

  • SHA1

    0e13b05c7726972565ed3e762277514b57c0fb2b

  • SHA256

    e6800bddeb1712b889fb7388e1b3f5876bcab829b8478cd9d0051b39e899bbc8

  • SHA512

    af2d20cf80a8706b0369dbbe36f3a3b24586cb3e3246dbf25cc41077a2a9d6c5212a1e6fc4ca13ad814ac340d65e7607df5affb99ecd3de748cca5dcbfe67e25

  • SSDEEP

    1536:LctjSYA+Rr9TJ9YJdjOE8XLbHFWW6fu0DJsoTaUr++ytZyuf77621L7s:LmH1JeLn4LbHH61J3r52NC21ns

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c2b01d34d33a515b817f4286b2bd53e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections