General

  • Target

    d04f594c946c5289da7288cbcde4e13e_JaffaCakes118

  • Size

    1.6MB

  • MD5

    d04f594c946c5289da7288cbcde4e13e

  • SHA1

    0969324637881134c7a2f44bee5c56af6a917155

  • SHA256

    cd21715b95fb1418683f26af24b513a69f2e4099e275f0092d9e632dccca9097

  • SHA512

    670ffc978824e327ec6c9ba313ffcdbce9ad5558bdfec92255613eda293dfa90a7dc28ed54d0665342fa103944b02f46bc2beb787d8d30f981717bedacbec18e

  • SSDEEP

    24576:IHnNEK7vaXDgPdVLsMPo1n07+atcoi5i26SNGrqfcEy076CqPBfO7XZQDVeXb:YNUgPdVLFwB0Pt5ov6+fCK6CMteqg

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d04f594c946c5289da7288cbcde4e13e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    610ca69eceffe7b2f70c15158e666ab6


    Headers

    Imports

    Sections