Overview

overview

9

Static

static

9

db19075b6a...18.exe

windows7-x64

6

db19075b6a...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    db19075b6a18a679cc10f4a6a8be7b3d_JaffaCakes118

  • Size

    96KB

  • MD5

    db19075b6a18a679cc10f4a6a8be7b3d

  • SHA1

    3da06ff6009b3d68a8a5f5f40c3a5a01777ae356

  • SHA256

    ed911e9f4a61d62b2f97922a8bc277890f4b1ff95ec1394dc6a1fdab7dcae2af

  • SHA512

    6d7c7842cee99949d176f5846d33e64e7c5ca7de9e4670c48dab49ef5ed810c0e10ae9c80dcd535168989d39e8e53271e03edebcb2f4d53ca5b6042fa4694041

  • SSDEEP

    1536:KHMWvbUW1YC9Xn+jOs9aUjsxhe2k11emO1bK2Rgmc/79X0dZbn9w2K0f:uMWvbH1Yy+C49jYJcerbG7/g9w2K0f

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db19075b6a18a679cc10f4a6a8be7b3d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0b809905358c0eaa9b7750661bba40ef


    Headers

    Imports

    Sections