Extracted

• • Target

    f5c544c32423a784af1339a5ab9b9084_JaffaCakes118

  • Size

    988KB

  • MD5

    f5c544c32423a784af1339a5ab9b9084

  • SHA1

    dd6ef46605985c44ae4ad73bafebbfd1c6bfa7a4

  • SHA256

    9b793748195694101c7dc362a6b3c16c549fcc3c25803c7d79633de6fbd8f267

  • SHA512

    6eaed9ee7ff2efd892414956799fc3084a8bff19a8ad142a8f96aecdbefe82cef5835ec79707f3eb7d31574284452c93120b2d002bde5a10888c4aa074374d84

  • SSDEEP

    24576:DIW+2b4W4DEla27+HiKS+YEZs0Cigy67hC:/EEd7bh

  Score

  10^/10

  zgratratbabylonrattrojanupx

  • Babylon RAT

    Babylon RAT is remote access trojan written in C++.

    trojanbabylonrat

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2