Overview

overview

10

Static

static

9

client.exe

windows7-x64

10

client.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_96a04a25f64190576a7fde27403cc3e58f6a4bdbcd7f90b644b3bc6de36ecd6b

  • Size

    284KB

  • MD5

    257e54173644c4bdccba1b3cacee6f25

  • SHA1

    33896fc53577f0e5d8cac1781df250998d5e3d89

  • SHA256

    96a04a25f64190576a7fde27403cc3e58f6a4bdbcd7f90b644b3bc6de36ecd6b

  • SHA512

    7a9462eb99d207475928f195d222caadb82791e8bac557e4e98f10620b681d155620302eb3418814eae36315088ec02f3a298cc16d11c8b86eedefd3a039906c

  • SSDEEP

    6144:WFx/PyIiauzo1VGbbsGRpcRfbeDBzrOwINyYWp/hKJdJln:WFx6do1Vmp0RfaDtgyYWp/hKJ1

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_96a04a25f64190576a7fde27403cc3e58f6a4bdbcd7f90b644b3bc6de36ecd6b
    .zip

    Password: infected

  • client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections