General

  • Target

    2ec55ecdc4a32ad646c2ad1eb09c9bca_JaffaCakes118

  • Size

    1.6MB

  • MD5

    2ec55ecdc4a32ad646c2ad1eb09c9bca

  • SHA1

    27d883703e3035f72ea808502cec36f5ee22c381

  • SHA256

    0622156672128934ab17a1c63221a5b2011e22318f25609d0cc5f442e1743dc1

  • SHA512

    3d4a62cd8808cf201d6dd3aee25c18487588b8b2becc90468c96cf124246c4b07ba21a854e2f9c74d4e8988e3127d1390eb4c186c3f911248bded48559475bc7

  • SSDEEP

    24576:OPHnNEK7vaXDgPdVLsMPo1n07+atcoi5i26SNGrqfcEy076CqPBfO7XZQDVeXs:qNUgPdVLFwB0Pt5ov6+fCK6CMteqP

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ec55ecdc4a32ad646c2ad1eb09c9bca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    cd7324b54217f5f4acf7bcf008cba34a


    Headers

    Imports

    Sections