Extracted

• • Target

    f0fc9b23fe84d6cc28c72ab06a9f6af8_JaffaCakes118

  • Size

    235KB

  • MD5

    f0fc9b23fe84d6cc28c72ab06a9f6af8

  • SHA1

    fbeafa476a2c3d3f0a2278ffc25260fc3358fee6

  • SHA256

    8f71b30d07fe2af96b83571d720dea3305929f06f127d5aaf3f49113d37ef7f3

  • SHA512

    fa2026c5bce3b4f86fa9694b8380dfd160302602a4d455ab6efd77f704c7df24b9cf31a5c3d683a0f2c33f3e5425f03665c706b5c8b9b6be110382ffd105b573

  • SSDEEP

    6144:6e948Gpl0PowJqQTv0kSEeFVSP8kCq6dcIYLJ:pPNJVDy1SP81qQbYF

  Score

  10^/10

  salitybackdoorevasionspywarestealertrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2

• • Target

    $PLUGINSDIR/System.dll

  • Size

    11KB

  • MD5

    00a0194c20ee912257df53bfe258ee4a

  • SHA1

    d7b4e319bc5119024690dc8230b9cc919b1b86b2

  • SHA256

    dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

  • SHA512

    3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

  • SSDEEP

    192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

  Score

  3^/10
  behavioral3behavioral4

• • Target

    $PLUGINSDIR/inetc.dll

  • Size

    20KB

  • MD5

    8d8fdad7e153d6b82913f6fdc407d12c

  • SHA1

    aabbeed33cd5221e4cb22aab6e48310df94facfd

  • SHA256

    e727c8bba6686c4814602f2bc089af4b4cf3498d1dbe1a08d8c4732da5ba046b

  • SHA512

    42bc0ce1aca63904c34025307fd4b1d9f480ae47e42e7dfa48bbbf8286d947de2989435ad7a748951291307949217afeebcd31d10a1356c9366d3187085773a2

  • SSDEEP

    384:0B/JF+HUI+LzlKSYWwgdHEINlWya4LL0Ac9khYLMkIX0+GBxgW+x:WFo72lvYWwgy8Fa4LX

  Score

  3^/10
  behavioral5behavioral6

• • Target

    $PLUGINSDIR/nsDialogs.dll

  • Size

    9KB

  • MD5

    ab73c0c2a23f913eabdc4cb24b75cbad

  • SHA1

    6569d2863d54c88dcf57c843fc310f6d9571a41e

  • SHA256

    3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

  • SHA512

    99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

  • SSDEEP

    96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

  Score

  3^/10
  behavioral7behavioral8