Overview

overview

9

Static

static

9

6a46f190e9...18.exe

windows7-x64

7

6a46f190e9...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a46f190e99be64c8c80d0b0d411ca39_JaffaCakes118

  • Size

    492KB

  • MD5

    6a46f190e99be64c8c80d0b0d411ca39

  • SHA1

    4f1470c92146b789f6a08ec7ed11431627f9f72c

  • SHA256

    b41563b486eb5836d23298641c0d1d024db1eef56905d963c267539fec3f9079

  • SHA512

    e1b9b14b75c71df63b943134dbb93d40354803c12ce845c732e9a8a8a5a1c0f8a54e92d14da04190f8d01f680f79b930573b3c3c6d8c5d8e2756dbdeaa8ea051

  • SSDEEP

    6144:guVsxydauno27hlHk9obVyBXNsZkm6vkClI8UE9SoyQqwgi6l:gumLbUo9pwFErUE9Soy/wghl

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a46f190e99be64c8c80d0b0d411ca39_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b3dd8af8d137ba7ebfd3d330e30b3c91


    Headers

    Imports

    Sections