General

  • Target

    eac105e5bb9ebb983ff160f900e8c9c8_JaffaCakes118

  • Size

    502KB

  • MD5

    eac105e5bb9ebb983ff160f900e8c9c8

  • SHA1

    22447353bd4513e9bc83eb6519d144b48ef7a804

  • SHA256

    17ef0fc9f1d3ae56620d04b98efe906145ee48dab9ea50bfe4b79323af486132

  • SHA512

    c2883ef1a84cdd03be25c399df7af0659d6f2b06de45015ebd8157212a9eb26250efe3df41e43ec318271e93698e382d8b951a8d94b64657138618e4ce810a93

  • SSDEEP

    6144:SbS/QTjhUqBfxrwEnuNcSsm7IoYGW0VvBXCAt6kihwE+VDpJYWmlwnx9bHP:SQtqB5urTIoYWBQk1E+VF9mOx9D

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eac105e5bb9ebb983ff160f900e8c9c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections