General

  • Target

    0ea8905431c182053886a94b34b761f6_JaffaCakes118

  • Size

    4.2MB

  • MD5

    0ea8905431c182053886a94b34b761f6

  • SHA1

    5dee2af44c0be27bcde7a30fc59cbb23666956ea

  • SHA256

    e1c3d1548aaed3b3f2c20dab3d38fc105f82ddc6c9fcfb33d773a736f3ac011d

  • SHA512

    fa6ae5d8e659bdb83b0c8b7831a12f245b41bc078c4e02f970fcda936b47226f0e616a333f2660949f561c3d34d8429580908b49a5a8b37551f1e2e9201dad88

  • SSDEEP

    49152:R7yDvy/3LQSOVBFmEfb6T7bINa/GIju3JK7hYHKSl6Br+kt+NGJqT5+GPX:8DvyC1mNbINauIju5QSlxkMF

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ea8905431c182053886a94b34b761f6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7f9f2d573c3c61b3049609e40e8bc4c8


    Headers

    Imports

    Exports

    Sections