General

  • Target

    JaffaCakes118_baf553415042d96920bdfc0eb2273d1b

  • Size

    104KB

  • MD5

    baf553415042d96920bdfc0eb2273d1b

  • SHA1

    5798c13396b0b88d54488d5950525ea764a6495c

  • SHA256

    6fdceac1a7c37e938583c979de34c557f7918b1c2db9234dd34cd5604f65d548

  • SHA512

    bf744cdeaaeb254f14cdb39f441bbd76091e0d61eeeeeb4d811e0a5401c4512db6faccf6f452af388ae6adea38c7dbaaaba7d5e3ed5a4b2a971daf0caee1fcf6

  • SSDEEP

    1536:YZuhD5z28TC2HuB+AAeNPJETgbSUPH4LyqcQ0tYA:RO4AAeDKgbSKHayqjoYA

Score
10/10

Malware Config

Signatures

  • BlackNET payload 1 IoCs
  • Blacknet family
  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_baf553415042d96920bdfc0eb2273d1b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections