blackshades | JaffaCakes118_096175198ac3f9e677270a33e3d8737c

General

Target
JaffaCakes118_096175198ac3f9e677270a33e3d8737c
Size 1.0MB
Sample250220-d2qccsvras
SHA256 3f862357f9455d73d39216c84deb9ae7bd817207740162da46e0f9038e85a0b1
MD5 096175198ac3f9e677270a33e3d8737c
SHA1 93166592f857693cd52b94301e1d16b81d5e8bc5
SHA512 04ca5088e6881c050487471a4e30defd6b43b6631cd4d3fe77fb10581662089a8d08eb465ab244ce376428fccdc37019b0733c4ccaede537be3b11d238056e50
SSDEEP 24576:vFiJdLLOJWNWioq0EcU0B+M40zw0lYYYRGPMjkq/m2hJcax2EOZYgUjWN9xZ:vF0d/MWNWioqbcUM+M4iwGYYYEmkq/mD
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx blackshades

Blackshades payload 1 IoCs

resource	yara_rule
sample	family_blackshades

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_096175198ac3f9e677270a33e3d8737c

SHA256 3f862357f9455d73d39216c84deb9ae7bd817207740162da46e0f9038e85a0b1
MD5 096175198ac3f9e677270a33e3d8737c
SHA1 93166592f857693cd52b94301e1d16b81d5e8bc5
SHA512 04ca5088e6881c050487471a4e30defd6b43b6631cd4d3fe77fb10581662089a8d08eb465ab244ce376428fccdc37019b0733c4ccaede537be3b11d238056e50
SSDEEP 24576:vFiJdLLOJWNWioq0EcU0B+M40zw0lYYYRGPMjkq/m2hJcax2EOZYgUjWN9xZ:vF0d/MWNWioqbcUM+M4iwGYYYEmkq/mD
MD5 SHA1 SHA512 SSDEEP

Blackshades payload
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4972

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths