General
-
Target
JaffaCakes118_2a0605fe6ee89eb3b394d0181b5d409bcbf08f9642082d196b51c7a0fc3bf6c8
-
Size
282KB
-
MD5
ae6b234a8759fb218e24102837520f4c
-
SHA1
bf3935fd05b5034e7af1c355e1bb74124e55e0cf
-
SHA256
2a0605fe6ee89eb3b394d0181b5d409bcbf08f9642082d196b51c7a0fc3bf6c8
-
SHA512
1f388e718b148a66bb19f452fafcd6de3ff90073dd7695930fb0f608062351d3c6b79a26c791f0c9f087a106607f590a8af26991a0a2aa046252cffaabba6ea2
-
SSDEEP
6144:lbW4q/Q6by7mtt/SrIiyCz95BQ/L64vG20/CAU2XuEGUnfag:Vxq/Q6bfdWIiykS/mPCAU2+EGUnfH
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
-
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_2a0605fe6ee89eb3b394d0181b5d409bcbf08f9642082d196b51c7a0fc3bf6c8
Password: infected
-
fdf.bin
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections