Overview

overview

9

Static

static

9

a5ba3a200d...18.exe

windows7-x64

1

a5ba3a200d...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5ba3a200dd7b12aa2ac0e540f92023e_JaffaCakes118

  • Size

    618KB

  • MD5

    a5ba3a200dd7b12aa2ac0e540f92023e

  • SHA1

    87bb42a88c132a115ff57075f8f212056e58096a

  • SHA256

    1806b2a303e74325cdae02498f2955b32bc2006e0b9aff87fcd48bbd34af3924

  • SHA512

    4077139d057e5aa069b0d1584dde4350e8cff5ae19415b977b807b9a9ea0ad218ea7b08c48bd7af7ca57d957e8a1fc37a87516896522a1806a5c9b58936be8ad

  • SSDEEP

    12288:mcdrdfV2jPjzQXSuZLykf3v+jBsi1gTkyMJGPg:zNlcLwiuZLyK32jB510i

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5ba3a200dd7b12aa2ac0e540f92023e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections