General

  • Target

    b8588211c1d83b99dae04ded119c2cfe_JaffaCakes118

  • Size

    595KB

  • MD5

    b8588211c1d83b99dae04ded119c2cfe

  • SHA1

    b70ab07024f6968cfe16b539a06077d690ba8bc3

  • SHA256

    b284452fdda28515183e229de9b9bb07bb080f75eac701e036447dd56b9939d3

  • SHA512

    d8445362f6c29f556f576281d050fb32dd4439aba9efa28962753543aa5e785b436b444019f37cd3ea1e92e268a76f72e753f511cdd14f81e47ac1b83abcaa67

  • SSDEEP

    12288:u7U7W1RkwTTNYgLIIkvOFGigkQW2rSE7o3N7hu5C1H9pBanssOPY:EwW0wHiCerU32rSCeNVuM1xanssOPY

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8588211c1d83b99dae04ded119c2cfe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections