General
-
Target
8bf61d9e64406631cbdda91905ddd7af_JaffaCakes118
-
Size
59KB
-
MD5
8bf61d9e64406631cbdda91905ddd7af
-
SHA1
c5e765fbb94b9eaa1deea2f7b5dd899f83ebd120
-
SHA256
fbb32877a47cc5ceb8ae92013d1ed2e380a64a62ac57e17b6a25abafb8a51e1a
-
SHA512
80f83355a194574b8987577412bbe0fee859496343c1ef14fd2eea9627e23e063d357a908cb3f718581afc396fb3bd9de61600dc7514744e8a6ee05a4afba99c
-
SSDEEP
1536:/FRgsGwPINSeR9qY3pparZUULSCM0i45W4b6uqp:/FRgsGO1Y3nYNPi45Tb69p
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
8bf61d9e64406631cbdda91905ddd7af_JaffaCakes118
-
mailpv/mailpv.chm
-
mailpv/mailpv.exe
Headers
Sections
-
out.upx
Headers
Sections
-
mailpv/readme.txt