General

  • Target

    b33efe778ac3815f287b4a3b0c5effb7_JaffaCakes118

  • Size

    39KB

  • MD5

    b33efe778ac3815f287b4a3b0c5effb7

  • SHA1

    22b6208881c388f372eefdac11a1331b52087e3a

  • SHA256

    ca96b8a491368614e6c78fa5d91a474cb8914d87f6d428e37da2ee6526fac4a3

  • SHA512

    639e2add3c8862701784f2c730f5c4ba68f16d3d5b9412fa8f391ea3f6186bad30c76aa82e2ca75d54d408947f202ed9eafa8667d87dd978c93fa98dd5947e89

  • SSDEEP

    768:QX0FQNQMSNKc3x9aJ7yLtjA+6mxZzZmXDUS9+QMmLcHJxmswPVzJOgzRofS:QX0Ky93x8eLY6O9EELfVzwWSfS

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b33efe778ac3815f287b4a3b0c5effb7_JaffaCakes118
    .rar
  • dialupass2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url