General
- Target jaffacakes118_DoubleImage v5.0.38.0 Full Inc Crack.exe
- Size 798KB
- Sample260910-dbkzysw1ht
- SHA256 e343639ee1a24a4a548fc34562a9e113273e8ac66f8e1cbbba6bdb9684d7209c
- MD5 ab228a4c2caa6a427d8a78c517bdab5b
- SHA1 d8c276ae7a227f5caaeab30db19902f15af1cfe3
- SHA512 98601a72fa7f2ae0990f7800e1629ed5bf2c25ac2f9030b6a595469f9164c5d6321d28c9c46e1e5ecf143f31bf16e36d16e2d6ee126bfb11cfdacc046aad6d5d
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T10B0523BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_DoubleImage v5.0.38.0 Full Inc Crack.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_DoubleImage v5.0.38.0 Full Inc Crack.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_DoubleImage v5.0.38.0 Full Inc Crack.exe
- Size 798KB
- SHA256 e343639ee1a24a4a548fc34562a9e113273e8ac66f8e1cbbba6bdb9684d7209c
- MD5 ab228a4c2caa6a427d8a78c517bdab5b
- SHA1 d8c276ae7a227f5caaeab30db19902f15af1cfe3
- SHA512 98601a72fa7f2ae0990f7800e1629ed5bf2c25ac2f9030b6a595469f9164c5d6321d28c9c46e1e5ecf143f31bf16e36d16e2d6ee126bfb11cfdacc046aad6d5d
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T10B0523BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext