General

  • Target

    a0af3b558c5b9b6f0598745d9716ef7a_JaffaCakes118

  • Size

    39KB

  • MD5

    a0af3b558c5b9b6f0598745d9716ef7a

  • SHA1

    ae17b64ddf0a5c871b20eb132da19356b2653afd

  • SHA256

    67a7d80b3672efc01c1c6802fb3be3bf80b847e74cdc3ebaa72077840e6493d3

  • SHA512

    9741b583360dd9c748196b28c5a117876970a1b4dc29d8a28c708b2457bdad3f2dedf6fb649a62877e1b9812cfec180d57818de3738a4b78922fcdc04ce98f78

  • SSDEEP

    768:hDGojCFBkV8f7hKzo9IsjtE+Y1CKGdedxcxa1jGc1RqiYQ4RvnO/PSv:RGou7s8Tozo9et1uY/b1BYvAKv

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a0af3b558c5b9b6f0598745d9716ef7a_JaffaCakes118
    .zip
  • WirelessKeyView.chm
    .chm
  • WirelessKeyView.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • readme.txt