Overview

overview

9

Static

static

9

dialupass.chm

windows7-x64

1

dialupass.chm

windows10-2004-x64

1

dialupass2.exe

windows7-x64

3

dialupass2.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f7e80e3637a5a06b47bd98a76f159ed_JaffaCakes118

  • Size

    44KB

  • MD5

    3f7e80e3637a5a06b47bd98a76f159ed

  • SHA1

    5b7a8eee8ddefd0b9a161170bafa7112d51b0c21

  • SHA256

    d7ed1083aca2e23b59710ecd108706e4d850d9b0d3dd8a6a6cf1d5c5b0265868

  • SHA512

    f0c7977cb7ac5edb7fa5c3c94ddaba67903496d494b9154a5ad9311b8df7672abc2acec6af5c15460791f0c4c375229f69e00220d4d2ee861a033fa6467efe9f

  • SSDEEP

    768:ZC7ImD1B+u/XKT1zqAxIvIF+PRjjyB/up3mERWuFor6KBGibuXZ4E7QCdb1ck3zs:ZC7jD1BgpqAxIw+RrJmpiKxyx7Fdb1Jj

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f7e80e3637a5a06b47bd98a76f159ed_JaffaCakes118
    .zip
  • dialupass.chm
    .chm
  • dialupass2.exe
    .exe windows:4 windows x86 arch:x86

    3008274b77d4e467e0a7d4cd2689589e


    Headers

    Imports

    Sections