Overview

overview

9

Static

static

9

0a71b6467b...18.exe

windows7-x64

9

0a71b6467b...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a71b6467b0af8b2c255bc221c94d2e6_JaffaCakes118

  • Size

    382KB

  • MD5

    0a71b6467b0af8b2c255bc221c94d2e6

  • SHA1

    dea4f0553f7d9d0c2dfd186f6b63a6c3566e958c

  • SHA256

    ef353377e6ca23e121433b3a279c5e723597f580e885a49eb215903439085105

  • SHA512

    179794ba3f284f66b6169ebc4a88d0177fa49e343096d5e766960b3e5b4401e46cfa9c9818fdf07fb1936f1f855623864063c2626823e309b831c3a3e69bdd05

  • SSDEEP

    6144:tUN69ud9TDLYymNDFSDnA5tMzk5ffhOT7BHbXjBvqTDVnP2BfWprjP5lCcCatkUP:h9E9TDEDTWnq8kWT7B7XlvqTDVnP2wpp

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a71b6467b0af8b2c255bc221c94d2e6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections