General
-
Target
ef801388089b0d5576bbc47ead591d8e_JaffaCakes118
-
Size
85KB
-
MD5
ef801388089b0d5576bbc47ead591d8e
-
SHA1
cec393c535df2c43e092172aa0a0863dc05053be
-
SHA256
bb04b074f46f12d6eb08e063f3829524ad462a4dc6ca6f7c687c29b7dc01e523
-
SHA512
045376c8f09fa6c77539fbb85d05c31d56a23b49b6d6375f49323526f20aa86cf4ec8e5bf89d26e64cc604efc6911ae47802e26b58ecdcb7ef19f8a46c30b3c2
-
SSDEEP
1536:iHJg7Q/VdmL5vApwXNhhxj68tJQAwYZQh2BnaQShtW3n9E2K1:Y+7a+1vA27mdMac39E2K1
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ef801388089b0d5576bbc47ead591d8e_JaffaCakes118
Headers
Sections