Extracted

• • Target

    e9d904cf365b771066b1ab1aef1d8923_JaffaCakes118

  • Size

    127KB

  • MD5

    e9d904cf365b771066b1ab1aef1d8923

  • SHA1

    3a495322005fe760f1f178efec3561b20ee1fa7b

  • SHA256

    b9645323fb40eae7e7b97423e25eff56345691b48415f4602962a86b52e7b272

  • SHA512

    00b6e08970a7bc8a17be05cea363002ead552a9bb5204a07d7aa06594820e357ede84430ba4f62836dc4ab5fd4d0c775c86a0f5e459e6b07668b44161890dbbb

  • SSDEEP

    384:/Bzhu1KO2jIf7kqbXdC3mD5z4onsND5DXP0M2vYCAGykBRSG/u/Ub8S6rDqnv47Y:zuCkdC2D5z4oWV0OCAB4Rld8Inv47

  Score

  10^/10

  metasploitbackdoortrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Drops file in System32 directory

  behavioral1behavioral2