Overview

overview

10

Static

static

10

0e096c7c7f...e8.exe

windows7-x64

10

0e096c7c7f...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_820eae6104c5aa7150917a53e25fd0be9633bcbb7120ea680967a52467e41249

  • Size

    1.7MB

  • MD5

    6e4586a5064bd13fd5058b93dbca52aa

  • SHA1

    e04e3a81881e36ebe09f27ff1c07a739fc69f278

  • SHA256

    820eae6104c5aa7150917a53e25fd0be9633bcbb7120ea680967a52467e41249

  • SHA512

    2d217a38cbab6df137751a8823edd60687b8ffc3d84a0f3c13a027bd6739b52de2ac23c2f73e4a1481c26a71b085b1c01a70fd14fa45e7ab7893822af0318ece

  • SSDEEP

    49152:X2UGSowazjQaQGmjESgsdkBHr1mUrVZDL:X2UGxwazNdmQFBrrZX

Score
10/10
fabookie

Malware Config

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
    fabookie
  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_820eae6104c5aa7150917a53e25fd0be9633bcbb7120ea680967a52467e41249
    .zip

    Password: infected

  • 0e096c7c7fdf3b3cb9bd341228c09bc9d92cefd9d9ccf3642d29b1eaa3ae68e8
    .exe windows:6 windows x64 arch:x64

    23e911f9a82ac0d345fa6cc9104b6bf4


    Headers

    Imports

    Sections