Extracted

• • Target

    0d3ce4412083e13d4fb027654e2126ad_JaffaCakes118

  • Size

    668KB

  • MD5

    0d3ce4412083e13d4fb027654e2126ad

  • SHA1

    c30f709f992cf158d772aff4c03ca487c5608b1c

  • SHA256

    f9c1f8d2c6382eb401fd9b4d74932310601f4751c90d5ee6b4d48450ceb67035

  • SHA512

    f28045463acda00a7fd3130e548f334d207757fd6be342dfcfe90b0d19de3422c250892130ea67cd3e35f87bdfa4a7213f4f28b59359b16c190bcb5eb88ff37c

  • SSDEEP

    12288:k0v0okAQh7/ojoRgLwAQh7bsk0FbXS81+9V2IYu/1Brg7C2vw15iYfB:j+DojfK10F/g9VpT07W157f

  Score

  10^/10

  babylonrattrojanupx

  • Babylon RAT

    Babylon RAT is remote access trojan written in C++.

    trojanbabylonrat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2