General

  • Target

    c09a59303026bd435c9ef36c4c51d48b_JaffaCakes118

  • Size

    650KB

  • MD5

    c09a59303026bd435c9ef36c4c51d48b

  • SHA1

    24b48f04a22cb6fa877458769964476c15232103

  • SHA256

    3b24efd304767d08b8e1003c5d20b1371098ca4d7052f1493d2011cedd2df0bb

  • SHA512

    287b7a7c1cf6fd7caabc598cf5ee533972853e52bf4d55d238abb6a1e205f16489a898407fe6d3a977f701f20c441b98d1ba45bfb1bd9e8dcb16aabee8d69cbd

  • SSDEEP

    12288:QyJ1ZMKOboBnCr5tCW3fP0KUfPmAVyIcC4PYfAHT/C5C1H95:7juboBq5scyZoZ9MuT/CM1

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c09a59303026bd435c9ef36c4c51d48b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections