General
-
Target
8d24cd8cb6e7abf17f4d8f0c34eb3466_JaffaCakes118
-
Size
50KB
-
MD5
8d24cd8cb6e7abf17f4d8f0c34eb3466
-
SHA1
666f6ccb4a69f4a56ee56e631b6a8077387fb688
-
SHA256
6adebf341a8d52c205afdb9c8feb4b65096b1705e6703afb6f43332996c08146
-
SHA512
092fddefe863d268aa2a826be539b0860b551f657a52809ae7072028aeb2d1199b10b13dcd308f0bba95af8bed3ef00ad295f598c0c154637c5215ff5150ee9e
-
SSDEEP
1536:/0+kwZWHtX1jETonwraw/3ak4EwdeZId5oAtMXZrKw/rVMWnvNbK:/0ggHtFyqklwdeuZurKOK
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
8d24cd8cb6e7abf17f4d8f0c34eb3466_JaffaCakes118
-
MozillaHistoryView/MozillaHistoryView.chm
-
MozillaHistoryView/MozillaHistoryView.exe
Headers
Sections
-
out.upx
Headers
Sections
-
MozillaHistoryView/MozillaHistoryView_lng.ini
-
MozillaHistoryView/readme.txt