General

  • Target

    d21aa8e8fdfa473b34b429362c3d8639_JaffaCakes118

  • Size

    129KB

  • MD5

    d21aa8e8fdfa473b34b429362c3d8639

  • SHA1

    7edd373bd9f2a4c58a2dc41d6f6b8e88da647faa

  • SHA256

    cf2b378ba224edfba1a4c65d209b4fd49e47c4a70ce0efd9ad9ff6115fac506f

  • SHA512

    2eab431019ea932df354cedeac640e5cc032b0003854004b75fe2c307a3a73b41fbec659c2db072505fa05ff1b8e965fb85dcf4af41bbd811dae26ec22f0bb9c

  • SSDEEP

    3072:+kMyeFuWgjNpUk7fk38EycdeRI94+U6+bG3ZOD/x:KHvGNNfkMZcde2qf63UDJ

Score
9/10
upx

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d21aa8e8fdfa473b34b429362c3d8639_JaffaCakes118
    .rar
  • ChromePass-v1.05/ChromePass.chm
    .chm
  • ChromePass-v1.05/ChromePass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ChromePass-v1.05/readme.txt
  • ChromePass-v1.05/新云软件.url
    .url