General
-
Target
56429c22a53dc8a4d0bb10dae272be9e_JaffaCakes118
-
Size
41KB
-
MD5
56429c22a53dc8a4d0bb10dae272be9e
-
SHA1
e4c7de8e6b0f07ea5296b3cadb331e21940d4562
-
SHA256
8ceeaa7c4e319a296412d48c0867cd106685985f5ece020ffd999886d0908871
-
SHA512
af163adbaacc7eef0b27f6f9149f3ae9835426d0738d4d5570a1ee9864e01afc57fa3d60cea7924d5c6da86cc1b4d8501e0135321e742f33ab54e141e5238b23
-
SSDEEP
768:98oYyNhtsi117NEsIQAfOZSWXf02B7UlxpsDAll0OunIv4lw7sdWY:rjj9zus74Ot8c7UlsDAlkn1w7hY
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
56429c22a53dc8a4d0bb10dae272be9e_JaffaCakes118
-
MailPassView/mailpv.exe
Headers
Sections
-
out.upx
Headers
Sections
-
MailPassView/readme.txt
-
วิธีใช้.txt