Extracted

• • Target

    e27f611b58c54c195dd169446f910f39_JaffaCakes118

  • Size

    5.8MB

  • MD5

    e27f611b58c54c195dd169446f910f39

  • SHA1

    42701017170cf3f72d6e9733195c0bccc49907fa

  • SHA256

    2d7e884e652780ab3e988f180b7bdc38ec7f178b03fb2dede887c74df2196d81

  • SHA512

    7d06cb408b73861dd419eb412307f7bd5674d556b4e5590b6efc05daf2ea8a2f8b16816bc2fa959959dffb9fd8f90698ff43f461f199ed62f2350c07a790b5e3

  • SSDEEP

    98304:vj1FNIFlRjCLym0a6akne3mNYgm32L/1dNK3acECdB3m8qZY2C:b1FNIFlpeN6aknGaY/32LrIawdB3wQ

  Score

  10^/10

  pandastealerspywarestealervmprotect

  • Panda Stealer payload

  • PandaStealer

    Panda Stealer is a fork of CollectorProject Stealer written in C++.

    stealerpandastealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2