General
-
Target
483f2219ce521c0b44933d3eee8a5b9e_JaffaCakes118
-
Size
91KB
-
MD5
483f2219ce521c0b44933d3eee8a5b9e
-
SHA1
70abf7cd8bedbe81a09cb754a746bf49a761e468
-
SHA256
b13f2069e3af4bb54a94970b177ffab021d259091e2922b72887862bd05feedb
-
SHA512
3738ff57c8d69f0ab584f904e2b287589db0a713b1da1e61d2fdcfdfba056a3daf5410fcac956bd2fab60a4478305e633d5fe2979e0d91796302d522cad4b775
-
SSDEEP
1536:qDggSitunVKPWDzf6f6WdPrKQo/0n/qxtiB+1esZh0lvSeIjJBCM67imAOnGc4/0:q78UPYzf0yrPndglvSeKAM6WFg94w1
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
483f2219ce521c0b44933d3eee8a5b9e_JaffaCakes118
-
netpass/netpass.chm
-
netpass/netpass.exe
Headers
Sections
-
out.upx
Headers
Sections
-
netpass/netpass.jpg
-
netpass/netpass_lng.ini
-
netpass/readme.txt